Age | Commit message (Collapse) | Author | |
---|---|---|---|
2017-05-28 | Implement an XON/XOFF protocol between the RDE and the SE to throttle | Claudio Jeker | |
per control session and peer the generation of imsg in the RDE. This reduces the memory pressure in the SE substantially and also a bit in the RDE. Makes the RDE more responsive for bgpctl commands. Tested by me with 100 peers * 2000 prefixes and by phessler@ on an AMS-IX border router with 200+ session. Convergance time got quite a bit better. OK phessler@ | |||
2017-05-28 | Merge two functions to lookup ELF sections by name. | Martin Pieuchot | |
ok claudio@, jasper@ | |||
2017-05-28 | reinstate the description of "mask-source" to "listen on socket": my changes | Jason McIntyre | |
two revisions previous inadvertently removed it; ok gilles | |||
2017-05-28 | Fix some spurious fatal firmware errors in iwm(4). | Stefan Sperling | |
If we are not in SCAN state anymore by the time hardware signals completion of a scan command, exit the scan completion handler immediately instead of calling ieee80211_end_scan(). Tested by tb@ and myself. ok mpi@ tb@ zhuk@ | |||
2017-05-28 | use __func__ in log messages. fix some whitespace while here. | Sebastian Benoit | |
From Hiltjo Posthuma hiltjo -AT codemadness -DOT- org, thanks! ok florian, claudio | |||
2017-05-28 | use __func__ in log messages. | Sebastian Benoit | |
From Hiltjo Posthuma hiltjo -AT codemadness -DOT- org, thanks! ok florian, claudio | |||
2017-05-28 | Indent and rename var; no functional change. | Antoine Jacoutot | |
2017-05-28 | style(9) some variable declarations | Sebastian Benoit | |
ok florian@ | |||
2017-05-28 | Reduce differences between the two pfctl_osfp.c files. | Michal Mazurek | |
Apply three commits from pfctl/pfctl_osfp.c OK bluhm@ | |||
2017-05-28 | check_tos() gets a parameter so i can remove another global var. | Sebastian Benoit | |
ok florian@ | |||
2017-05-28 | introduce struct tr_conf to keep all of the configuration. | Sebastian Benoit | |
Functions needing access to any of those vars get it passed as a parameter. result: even less global vars. ok florian@ | |||
2017-05-28 | move as many globals as possible into the main function - thats the | Sebastian Benoit | |
only place where they are used. Only exception: v6flags - make it an argument to usage() ok florian@ | |||
2017-05-28 | Remove unused flag IWM_FLAG_STOPPED. | Stefan Sperling | |
ok tedu@ of course | |||
2017-05-28 | Use membar_enter_after_atomic() and membar_exit_before_atomic(). | Martin Pieuchot | |
2017-05-28 | Remove useless splnet()/splx() dances. | Martin Pieuchot | |
Data structures modified in the ioctl path are protected by the NET_LOCK(). ok sashan@ | |||
2017-05-28 | propose and configure default gateway | Florian Obser | |
2017-05-28 | Protect the global array of interfaces with the NET_LOCK(). | Martin Pieuchot | |
ok sashan@ | |||
2017-05-28 | When a daemon reaches its timeout when starting, display "timeout" instead | Antoine Jacoutot | |
of "ok" so the user is warned and has a chance to fix it (most of the time due to bogus flags). Daemons reaching the timeout without being able to start are still marked as "failed" (which should also give a clue to the user that some investigation is needed). prodded by beck@ a while ago discussed with and ok sthen@ | |||
2017-05-28 | Rename ip_local() to ip_deliver() and give it the same parameters | Alexander Bluhm | |
as the pr_input functions. Add an assert that IPv4 delivery ends in IP proto done to assure that IPv4 protocol functions work like IPv6. OK mpi@ | |||
2017-05-28 | Remove _mode variable and use AI_MODE directly instead. Use the | Robert Peichaer | |
exit code of ftp consistently to determine success of fetching the response file. discussed with and OK tb@ | |||
2017-05-28 | mark up "masquerade"; | Jason McIntyre | |
2017-05-28 | split the two "listen on" directives into two separate items; | Jason McIntyre | |
the markup that we were using wouldn;t have worked with groff anyway but, more worringly, it didn;t work with mandoc either; | |||
2017-05-28 | Do a better job of not printing sequences we cannot reverse in DELETE or | Theo de Raadt | |
KILL. Therefore we can do a better job cleaning up. testing by benno | |||
2017-05-28 | Use intr_disable()/intr_restore() to reduce differences with sparc64 | Martin Pieuchot | |
mp_lock. ok kettenis@, visa@ | |||
2017-05-28 | Drop useless lines continuation; no functional change. | Antoine Jacoutot | |
2017-05-28 | etc/netstart: use colon separator instead of dot with chown | Adam Wolk | |
OK jung@, deraadt@, jmc@ | |||
2017-05-28 | chown: Remove SUPPORT_DOT ifdef - it's on by default for 22 years | Adam Wolk | |
The old syntax was deprecated 25 years ago when the utility was first standardised in IEEE Std 1003.2-1992 ("POSIX.2"). There was no POSIX version of chown with the dot separator. Let's stop pretending that it will ever go away. OK jung@, deraadt@, jmc@ | |||
2017-05-28 | Catch up with pfctl/pfctl_osfp.c, no binary change. | Michal Mazurek | |
OK deraadt@ | |||
2017-05-28 | Fix cursor position while removing characters from the command line. | anton | |
While here, remove a condition that becomes redundant. ok schwarze@ tb@ | |||
2017-05-28 | print_ioctl() is unused if not debugging. Found with clang, after | Michal Mazurek | |
marking the function "static". Use OSFP_DEBUG, in a similar fashion to OPT_DEBUG (pfctl_optimize.c). OK bluhm@ | |||
2017-05-28 | remove bogus atomic_swap_64 code from i386 | Jonathan Gray | |
xchg can't handle 64 bit values on i386. gcc errors if the code is called, clang errors if it is included. ok mlarkin@ kettenis@ | |||
2017-05-27 | use pread and pwrite to save code and syscalls. ok mlarkin | Ted Unangst | |
2017-05-27 | Fix the carp mode 'balancing ip-stealth'. Set the link state UP | Alexander Bluhm | |
if at least one vhid is in state MASTER. from Florian Riehm; OK florian@ | |||
2017-05-27 | fix previous as noted by mpi, thx florian | Sebastian Benoit | |
2017-05-27 | move sending of pflow packet into a task, seperated from the data | Sebastian Benoit | |
collection by a mbuf queue. with help from mpi@ ok florian@ | |||
2017-05-27 | remove devel/waf gone 2 years ago, may not come back but still gives nightmares | Joerg Jung | |
ok ajacoutot | |||
2017-05-27 | On i386 and amd64, atomic instructions include an implicit memory barrier. | Mark Kettenis | |
ok mikeb@, visa@, mpi@ | |||
2017-05-27 | Ok turns out we still want to keep the rc_bg variable around but we need | Antoine Jacoutot | |
to know which daemon cannot background themselves (actually we want to know the opposite, but there are much more). However, it's only needed in _rc_wait and rc.subr still does its magic without the need to add `&'. | |||
2017-05-27 | Add membar_enter_after_atomic(9) and membar_exit_before_atomic(9) APIs to | Mark Kettenis | |
allow important optimizations on architectures where atomic instructions include and implied memory barrier. ok mikeb@, visa@, mpi@ | |||
2017-05-27 | Move includes. | Michal Mazurek | |
This reduces the diff with usr.sbin/tcpdump/pfctl_osfp.c. The change from tcpdump is newer, so change pfctl. No binary change. OK deraadt@ | |||
2017-05-27 | nvme: Don't set prp1 for DEL_IOCQ | Stefan Fritsch | |
NVM_ADMIN_DEL_IOCQ does not need prp1 (just as NVM_ADMIN_DEL_IOSQ). Remove what is likely a cut'n'paste error from the *_ADD_* code. tested by claudio@ ok jmatthew@ | |||
2017-05-27 | Also test arrays of double and long long. | Todd C. Miller | |
2017-05-27 | Push the NET_LOCK down into PF_KEY so that it can be treated like PF_ROUTE. | Claudio Jeker | |
Only pfkeyv2_send() needs the NET_LOCK() so grab it at the start and release at the end. This should allow to push the locks down in other places. OK mpi@, bluhm@ | |||
2017-05-27 | Protect the global list of softc with the NET_LOCK(). | Martin Pieuchot | |
ok sashan@ | |||
2017-05-27 | use sizeof("constant string") to avoid magic number | Florian Obser | |
2017-05-27 | print router preference | Florian Obser | |
2017-05-27 | Protect the global list of softc with the NET_LOCK(). | Martin Pieuchot | |
While here remove superfluous splnet()/splx() in the ioctl routine. ok sashan@ | |||
2017-05-27 | Remove useless splnet()/splx() dances. | Martin Pieuchot | |
pfsyncioctl() is executed with the NET_LOCK() held which is enough. ok sashan@ | |||
2017-05-27 | Allow an administrator to disable the bgp loop detection algorithm, | Peter Hessler | |
which is useful in very limited situations. Angry dragons and grues will hunt for you, if you use it. OK claudio@ sthen@ benno@ | |||
2017-05-27 | allow only one network <prefix> statement per for the same prefix. | Sebastian Benoit | |
ok florian@ phessler@ |