summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2017-05-28Implement an XON/XOFF protocol between the RDE and the SE to throttleClaudio Jeker
per control session and peer the generation of imsg in the RDE. This reduces the memory pressure in the SE substantially and also a bit in the RDE. Makes the RDE more responsive for bgpctl commands. Tested by me with 100 peers * 2000 prefixes and by phessler@ on an AMS-IX border router with 200+ session. Convergance time got quite a bit better. OK phessler@
2017-05-28Merge two functions to lookup ELF sections by name.Martin Pieuchot
ok claudio@, jasper@
2017-05-28reinstate the description of "mask-source" to "listen on socket": my changesJason McIntyre
two revisions previous inadvertently removed it; ok gilles
2017-05-28Fix some spurious fatal firmware errors in iwm(4).Stefan Sperling
If we are not in SCAN state anymore by the time hardware signals completion of a scan command, exit the scan completion handler immediately instead of calling ieee80211_end_scan(). Tested by tb@ and myself. ok mpi@ tb@ zhuk@
2017-05-28use __func__ in log messages. fix some whitespace while here.Sebastian Benoit
From Hiltjo Posthuma hiltjo -AT codemadness -DOT- org, thanks! ok florian, claudio
2017-05-28use __func__ in log messages.Sebastian Benoit
From Hiltjo Posthuma hiltjo -AT codemadness -DOT- org, thanks! ok florian, claudio
2017-05-28Indent and rename var; no functional change.Antoine Jacoutot
2017-05-28style(9) some variable declarationsSebastian Benoit
ok florian@
2017-05-28Reduce differences between the two pfctl_osfp.c files.Michal Mazurek
Apply three commits from pfctl/pfctl_osfp.c OK bluhm@
2017-05-28check_tos() gets a parameter so i can remove another global var.Sebastian Benoit
ok florian@
2017-05-28introduce struct tr_conf to keep all of the configuration.Sebastian Benoit
Functions needing access to any of those vars get it passed as a parameter. result: even less global vars. ok florian@
2017-05-28move as many globals as possible into the main function - thats theSebastian Benoit
only place where they are used. Only exception: v6flags - make it an argument to usage() ok florian@
2017-05-28Remove unused flag IWM_FLAG_STOPPED.Stefan Sperling
ok tedu@ of course
2017-05-28Use membar_enter_after_atomic() and membar_exit_before_atomic().Martin Pieuchot
2017-05-28Remove useless splnet()/splx() dances.Martin Pieuchot
Data structures modified in the ioctl path are protected by the NET_LOCK(). ok sashan@
2017-05-28propose and configure default gatewayFlorian Obser
2017-05-28Protect the global array of interfaces with the NET_LOCK().Martin Pieuchot
ok sashan@
2017-05-28When a daemon reaches its timeout when starting, display "timeout" insteadAntoine Jacoutot
of "ok" so the user is warned and has a chance to fix it (most of the time due to bogus flags). Daemons reaching the timeout without being able to start are still marked as "failed" (which should also give a clue to the user that some investigation is needed). prodded by beck@ a while ago discussed with and ok sthen@
2017-05-28Rename ip_local() to ip_deliver() and give it the same parametersAlexander Bluhm
as the pr_input functions. Add an assert that IPv4 delivery ends in IP proto done to assure that IPv4 protocol functions work like IPv6. OK mpi@
2017-05-28Remove _mode variable and use AI_MODE directly instead. Use theRobert Peichaer
exit code of ftp consistently to determine success of fetching the response file. discussed with and OK tb@
2017-05-28mark up "masquerade";Jason McIntyre
2017-05-28split the two "listen on" directives into two separate items;Jason McIntyre
the markup that we were using wouldn;t have worked with groff anyway but, more worringly, it didn;t work with mandoc either;
2017-05-28Do a better job of not printing sequences we cannot reverse in DELETE orTheo de Raadt
KILL. Therefore we can do a better job cleaning up. testing by benno
2017-05-28Use intr_disable()/intr_restore() to reduce differences with sparc64Martin Pieuchot
mp_lock. ok kettenis@, visa@
2017-05-28Drop useless lines continuation; no functional change.Antoine Jacoutot
2017-05-28etc/netstart: use colon separator instead of dot with chownAdam Wolk
OK jung@, deraadt@, jmc@
2017-05-28chown: Remove SUPPORT_DOT ifdef - it's on by default for 22 yearsAdam Wolk
The old syntax was deprecated 25 years ago when the utility was first standardised in IEEE Std 1003.2-1992 ("POSIX.2"). There was no POSIX version of chown with the dot separator. Let's stop pretending that it will ever go away. OK jung@, deraadt@, jmc@
2017-05-28Catch up with pfctl/pfctl_osfp.c, no binary change.Michal Mazurek
OK deraadt@
2017-05-28Fix cursor position while removing characters from the command line.anton
While here, remove a condition that becomes redundant. ok schwarze@ tb@
2017-05-28print_ioctl() is unused if not debugging. Found with clang, afterMichal Mazurek
marking the function "static". Use OSFP_DEBUG, in a similar fashion to OPT_DEBUG (pfctl_optimize.c). OK bluhm@
2017-05-28remove bogus atomic_swap_64 code from i386Jonathan Gray
xchg can't handle 64 bit values on i386. gcc errors if the code is called, clang errors if it is included. ok mlarkin@ kettenis@
2017-05-27use pread and pwrite to save code and syscalls. ok mlarkinTed Unangst
2017-05-27Fix the carp mode 'balancing ip-stealth'. Set the link state UPAlexander Bluhm
if at least one vhid is in state MASTER. from Florian Riehm; OK florian@
2017-05-27fix previous as noted by mpi, thx florianSebastian Benoit
2017-05-27move sending of pflow packet into a task, seperated from the dataSebastian Benoit
collection by a mbuf queue. with help from mpi@ ok florian@
2017-05-27remove devel/waf gone 2 years ago, may not come back but still gives nightmaresJoerg Jung
ok ajacoutot
2017-05-27On i386 and amd64, atomic instructions include an implicit memory barrier.Mark Kettenis
ok mikeb@, visa@, mpi@
2017-05-27Ok turns out we still want to keep the rc_bg variable around but we needAntoine Jacoutot
to know which daemon cannot background themselves (actually we want to know the opposite, but there are much more). However, it's only needed in _rc_wait and rc.subr still does its magic without the need to add `&'.
2017-05-27Add membar_enter_after_atomic(9) and membar_exit_before_atomic(9) APIs toMark Kettenis
allow important optimizations on architectures where atomic instructions include and implied memory barrier. ok mikeb@, visa@, mpi@
2017-05-27Move includes.Michal Mazurek
This reduces the diff with usr.sbin/tcpdump/pfctl_osfp.c. The change from tcpdump is newer, so change pfctl. No binary change. OK deraadt@
2017-05-27nvme: Don't set prp1 for DEL_IOCQStefan Fritsch
NVM_ADMIN_DEL_IOCQ does not need prp1 (just as NVM_ADMIN_DEL_IOSQ). Remove what is likely a cut'n'paste error from the *_ADD_* code. tested by claudio@ ok jmatthew@
2017-05-27Also test arrays of double and long long.Todd C. Miller
2017-05-27Push the NET_LOCK down into PF_KEY so that it can be treated like PF_ROUTE.Claudio Jeker
Only pfkeyv2_send() needs the NET_LOCK() so grab it at the start and release at the end. This should allow to push the locks down in other places. OK mpi@, bluhm@
2017-05-27Protect the global list of softc with the NET_LOCK().Martin Pieuchot
ok sashan@
2017-05-27use sizeof("constant string") to avoid magic numberFlorian Obser
2017-05-27print router preferenceFlorian Obser
2017-05-27Protect the global list of softc with the NET_LOCK().Martin Pieuchot
While here remove superfluous splnet()/splx() in the ioctl routine. ok sashan@
2017-05-27Remove useless splnet()/splx() dances.Martin Pieuchot
pfsyncioctl() is executed with the NET_LOCK() held which is enough. ok sashan@
2017-05-27Allow an administrator to disable the bgp loop detection algorithm,Peter Hessler
which is useful in very limited situations. Angry dragons and grues will hunt for you, if you use it. OK claudio@ sthen@ benno@
2017-05-27allow only one network <prefix> statement per for the same prefix.Sebastian Benoit
ok florian@ phessler@