summaryrefslogtreecommitdiff
path: root/sys/netinet/ip_esp.h
diff options
context:
space:
mode:
authorMarkus Friedl <markus@cvs.openbsd.org>2003-12-02 23:16:30 +0000
committerMarkus Friedl <markus@cvs.openbsd.org>2003-12-02 23:16:30 +0000
commit7827007d3935fef762fc37ed47e44956982e543a (patch)
tree32503217eaf3f477211d64e2f795e83f59c1a618 /sys/netinet/ip_esp.h
parentefce987ff534832e2def76f49222eb98d59aefaa (diff)
UDP encapsulation for ESP in transport mode (draft-ietf-ipsec-udp-encaps-XX.txt)
ok deraadt@
Diffstat (limited to 'sys/netinet/ip_esp.h')
-rw-r--r--sys/netinet/ip_esp.h15
1 files changed, 12 insertions, 3 deletions
diff --git a/sys/netinet/ip_esp.h b/sys/netinet/ip_esp.h
index 6be3aafcf23..ba1098adaf7 100644
--- a/sys/netinet/ip_esp.h
+++ b/sys/netinet/ip_esp.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: ip_esp.h,v 1.38 2003/02/12 14:41:07 jason Exp $ */
+/* $OpenBSD: ip_esp.h,v 1.39 2003/12/02 23:16:28 markus Exp $ */
/*
* The authors of this code are John Ioannidis (ji@tla.org),
* Angelos D. Keromytis (kermit@csd.uch.gr) and
@@ -61,21 +61,30 @@ struct espstat
u_int32_t esps_toobig; /* Packet got larger than IP_MAXPACKET */
u_int32_t esps_pdrops; /* Packet blocked due to policy */
u_int32_t esps_crypto; /* Crypto processing failure */
+ u_int32_t esps_udpencin; /* Input ESP-in-UDP packets */
+ u_int32_t esps_udpencout; /* Output ESP-in-UDP packets */
+ u_int32_t esps_udpinval; /* Invalid input ESP-in-UDP packets */
};
/*
* Names for ESP sysctl objects
*/
-#define ESPCTL_ENABLE 1 /* Enable ESP processing */
-#define ESPCTL_MAXID 2
+#define ESPCTL_ENABLE 1 /* Enable ESP processing */
+#define ESPCTL_UDPENCAP_ENABLE 2 /* Enable ESP over UDP */
+#define ESPCTL_UDPENCAP_PORT 3 /* UDP port for encapsulation */
+#define ESPCTL_MAXID 4
#define ESPCTL_NAMES { \
{ 0, 0 }, \
{ "enable", CTLTYPE_INT }, \
+ { "udpencap", CTLTYPE_INT }, \
+ { "udpencap_port", CTLTYPE_INT }, \
}
#ifdef _KERNEL
extern int esp_enable;
+extern int udpencap_enable;
+extern int udpencap_port;
extern struct espstat espstat;
#endif /* _KERNEL */
#endif /* _NETINET_IP_ESP_H_ */