Repository navigation

Add native HA clustering - #3069

Open

DL6ER wants to merge 77 commits into

developmentfrom

new/cluster

Open

Add native HA clustering#3069
DL6ER wants to merge 77 commits into
developmentfrom
new/cluster

Commits on Oct 19, 2026
- Watch the other Pi-holes and hand DHCP over when one fails
  DL6ER
  committed
  3212368
- Keep the nodes' configuration and lists in step
  DL6ER
  committed
  a8a2149
- Make synchronization survive an upgrade, an interruption and a node leaving
  DL6ER
  committed
  523f0e3
- Decide DHCP and the virtual address on what a node can actually do
  DL6ER
  committed
  39b5cb4
- Decide on what the cluster can see, not on what one node can poll
  DL6ER
  committed
  b42c54e
- Synchronize the cluster under the config lock
  DL6ER
  committed
  1532b52
- Build the cluster document without a connection
  DL6ER
  committed
  5583324
- Rename the cluster's `sha256_hex()` -> `body_sha256_hex()`
  DL6ER
  committed
  e8d3f3c
- Mark the `certificate_pin()` stub const
  DL6ER
  committed
  2969d4b
- Keep host-dependent settings off the cluster
  DL6ER
  committed
  8d5252d
- Refuse a virtual IP that belongs to somebody else
  DL6ER
  committed
  f24d0ad
- Do not free an empty lease download in `take_leases()`
  DL6ER
  committed
  2d55fc6
- Answer an older cluster push after releasing the config lock
  DL6ER
  committed
  965b207
- Tell a cluster peer whether its push was taken
  DL6ER
  committed
  cc01dfb
- Document that `?restart=false` does not reach the other cluster nodes
  DL6ER
  committed
  b7dfbc4
- Answer discovery only where `webserver.acl` admits the source
  DL6ER
  committed
  a371e1b
- Name the cluster list archive entry `etc/pihole/gravity.db`
  DL6ER
  committed
  c229737
- Advertise IPv6 cluster members through DHCPv6
  DL6ER
  committed
  870e1cb
- Keep cluster stamps at full precision and treat equal ones as one version
  DL6ER
  committed
  43c0f2c
- Correct the cluster OpenAPI specification
  DL6ER
  committed
  1ef5faf
- Say what clustering needs in the cluster help texts
  DL6ER
  committed
  f1431ce
- Retry `waitpid()` of the cluster gravity run on `EINTR`
  DL6ER
  committed
  d4742ff
- Close FTL's descriptors in the cluster gravity run
  DL6ER
  committed
  437e093
- Log how a cluster gravity run ended
  DL6ER
  committed
  ceff2c3
- Stop the cluster round once FTL is stopping
  DL6ER
  committed
  fe43ad1
- End the cluster's own gravity run when a stop is pending
  DL6ER
  committed
  ee16cde
- Settle a cluster gravity run where its outcome arrives
  DL6ER
  committed
  b907c6a
- Hold cluster restarts while gravity runs
  DL6ER
  committed
  bbd1c96
- Let the cluster thread finish a locked step when FTL stops
  DL6ER
  committed
  b64024a
- Wait for a gravity run before taking or rebuilding lists
  DL6ER
  committed
  e3c2453
- Date cluster list edits by their API write, not by the round
  DL6ER
  committed
  de7be44
- Compare a cluster rebuild with the lists as imported
  DL6ER
  committed
  e45301b
- Keep taking and dating lists while a cluster rebuild is owed
  DL6ER
  committed
  1cfd1a0
- Keep a node out of DHCP failover that cannot serve DHCP
  DL6ER
  committed
  e8797aa
- Do not hold a DHCP takeover back for the cluster's own gravity run
  DL6ER
  committed
  1c05caa
- Rebuild again when the lists stay unreadable after a cluster rebuild
  DL6ER
  committed
  715f5ef
- Stamp a configuration change only once `pihole.toml` holds it
  DL6ER
  committed
  b8e8143
- Show cluster problems on the web interface
  DL6ER
  committed
  6394829
Commits on Oct 20, 2026
- Stamp every synchronized setting on its own
  DL6ER
  committed
  f177cd5
- Push only changes made here, and say which pushed items were kept
  DL6ER
  committed
  5e81f6e
- Read a signed cluster push up to 1 MiB
  DL6ER
  committed
  b17c6e5
- Warn when a peer's lists replace list edits no other node had
  DL6ER
  committed
  22eef20
- Keep DHCP on the serving node and hold it back at start-up
  DL6ER
  committed
  bb849fa
- Require a quorum for DHCP and the virtual IP
  DL6ER
  committed
  d1a119d
- Announce the virtual IP every round while holding it
  DL6ER
  committed
  30d77b5
- Keep the virtual IP across an internal restart
  DL6ER
  committed
  e1664c1
- Require a pin or `cluster.tls.ca` to join a cluster
  DL6ER
  committed
  0ab81a3
- Merge a serving node's leases instead of overwriting the copy
  DL6ER
  committed
  56fd542
- Spend a TOTP code once across the cluster
  DL6ER
  committed
  758be4e
- Fix the log line for a push the peer did not take
  DL6ER
  committed
  36cb9db
- Explain a list edit by the tables it left, not by the database file
  DL6ER
  committed
  d9b3504
- Warn when a gravity run swaps out a list edit made during it
  DL6ER
  committed
  eb1aa36
- Defer to a member holding versions when this node holds none
  DL6ER
  committed
  e2e5856
- Hand a starting point over once per value
  DL6ER
  committed
  a486ec3
- Read the configuration generations under the sync lock in `push_round()`
  DL6ER
  committed
  39c9570
- Answer a cluster push that `pihole.toml` did not take as a failure
  DL6ER
  committed
  0ffe6d1
- Publish the lists on disk after a pull taken while a rebuild is owed
  DL6ER
  committed
  f8cb751
- Do not take a leftover `gravity.db_temp` for a running gravity
  DL6ER
  committed
  5a881b5
- Settle a cluster gravity run that finished before a stop could end it
  DL6ER
  committed
  2563d6e
- Say in the `cluster.enabled` help how lists are synchronized
  DL6ER
  committed
  39a1b9c
- Guard the frees in `cluster_leases_merge()`
  DL6ER
  committed
  a861360
- Prefer the serving node's leases when merging
  DL6ER
  committed
  dde04d3
- Keep the default IPv6 DNS servers without IPv6 members
  DL6ER
  committed
  e1e5287
- Refuse link-local, network and broadcast addresses as virtual IP
  DL6ER
  committed
  81b3a64
- Hold DHCP back in the running configuration only
  DL6ER
  committed
  456db0c
- Count only the other member's polls, and what it serves
  DL6ER
  committed
  35e5054
- Probe the link before claiming the virtual IP
  DL6ER
  committed
  4b663a7
- Move the virtual IP when `cluster.vip.interface` changes
  DL6ER
  committed
  c563209
- Mention the start-up hold-back in the failover help
  DL6ER
  committed
  de59922
- Read a large push only from a sender that signed here before
  DL6ER
  committed
  94e6b71
Commits on Oct 21, 2026
- Keep a password changed while a legacy login is upgraded
  DL6ER
  committed
  cc42b00
- Tell the peers at once when a TOTP code is used
  DL6ER
  committed
  837cde4
- Send what this node serves with the 2FA notice too
  DL6ER
  committed
  8b23759
Commits on Oct 22, 2026
- Merge branch 'development' into new/cluster
  DL6ER
  committed
  f1c82a8
Commits on Oct 26, 2026
- Merge branch 'development' into new/cluster
  DL6ER
  committed
  17e9bae
- Merge branch 'development' into new/cluster
  DL6ER
  committed
  980abec
Commits on Nov 1, 2026
- Merge branch 'development' into new/cluster
  DL6ER
  committed
  e0a0cc9

Commits

Commits on Oct 19, 2026

Commits on Oct 20, 2026

Commits on Oct 21, 2026

Commits on Oct 22, 2026

Commits on Oct 26, 2026

Commits on Nov 1, 2026