summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-02-03Turns off the direct ACK on every other segmentjan
The kernel uses a huge amount of processing time for sending ACKs to the sender on the receiving interface. After receiving a data segment, we send out two ACKs. The first one in tcp_input() direct after receiving. The second ACK is send out, after the userland or the sosplice task read some data out of the socket buffer. Thus, we save some processing time and improve network performance. Longer tested by sthen@ OK claudio@
2021-02-03Adding a hard-trap instruction after the __threxit syscall instructionKurt Miller
broke pthreads on hppa. Reverting. Ok deraadt@
2021-02-03Add OID for draft-ietf-opsawg-finding-geofeedsjob
https://tools.ietf.org/html/draft-ietf-opsawg-finding-geofeeds describes a mechanism to authenticate RFC 8805 Geofeed data files through the RPKI. OpenSSL counterpart https://github.com/openssl/openssl/pull/14050 OK tb@ jsing@
2021-02-03After the rev. 1.108 commit we see some issues with ugen(4) behaviour,Marcus Glocker
which finally makes umb(4) fail, since ugen(4) attaches to one of the umb(4) interfaces, fails, and marks the whole device dying. Therefore make usbd_device2interface_handle() backwards compatible again. Problem reported by Mikolaj Kucharski. ok edd@
2021-02-03Remove rsync.c from the test tool builds, nothing depends on that anymoreClaudio Jeker
2021-02-03Use mkpath() == -1 to check for failure. No functional change.Claudio Jeker
2021-02-03change pf_route so pf only runs when packets enter and leave the stack.David Gwynne
before this change pf_route operated on the semantic that pf runs when packets go over an interface, so when pf_route changed which interface the packet was on it would run pf_test again. this change changes (restores) the semantic that pf is only supposed to run when packets go in or out of the network stack, even if route-to is responsibly for short circuiting past the network stack. just to be clear, for normal packets (ie, those not touched by route-to/reply-to/dup-to), there isn't a difference between running pf when packets enter or leave the stack, or having pf run when a packet goes over an interface. the main reason for this change is that running the same packet through pf multiple times creates confusion for the state table. by default, pf states are floating, meaning that packets are matched to states regardless of which interface they're going over. if a packet leaving on em0 is rerouted out em1, both traversals will end up using the same state, which at best will make the accounting look weird, or at worst fail some checks in the state and get dropped. another reason for this commit is is to make handling of the changes that route-to makes consistent with other changes that are made to packet. eg, when nat is applied to a packet, we don't run pf_test again with the new addresses. the main caveat with this diff is you can't have one rule that pushes a packet out a different interface, and then have a rule on that second interface that NATs the packet. i'm not convinced this ever worked reliably or was used much anyway, so we don't think it's a big concern. discussed with many, with special thanks to bluhm@, sashan@ and sthen@ for weathering most of that pain. ok claudio@ sashan@ jmatthew@
2021-02-03remove ancient malloc ? realloc dance. always use realloc.Theo de Raadt
ok millert tb
2021-02-02whitespaceDamien Miller
2021-02-02fix memleaks in private key deserialisation; enforce more consistencyDamien Miller
between redundant fields in private key certificate and private key body; ok markus@
2021-02-02memleak on error path; ok markus@Damien Miller
2021-02-02add -Tu to usage();Jason McIntyre
2021-02-02Adjust the repository handling a bit. Instead of storing host/module pairsClaudio Jeker
store repo (rsync URI) and local (the local path to the repository). Simplifies the the rsync handling a fair bit. OK deraadt@
2021-02-02Add a mkpath() helper function to rpki-client to recursively createClaudio Jeker
directories. OK deraadt@
2021-02-02As done for the AF_INET multicast case, ensure that passed interfaceClaudio Jeker
via index is actually in the right rdomain for the socket. OK bluhm@ mvs@
2021-02-02KNF, move { up to if () statementClaudio Jeker
2021-02-02If IP_MULTICAST_IF or IP_ADD_MEMBERSHIP pass a interface index to theClaudio Jeker
kernel make sure that the rdomain of that interface is the same as the rdomain of the inpcb. Problem spotted and fix tested by semarie@ OK bluhm@ mvs@
2021-02-02dhclient(8): fork_privchld, take_charge, propose_release: poll(2) -> ppoll(2)cheloha
Switch from poll(2) to ppoll(2) in a few more functions. Because we're working with ppoll(2) and clock_gettime(2) it is easier to encode the various timeouts as static const timespecs instead of preprocessor macros. This way we aren't packing timespecs in the middle of the code, which distracts from the (more important) logic of what the code is doing. Part of a larger campaign improve "time stuff" in dhclient(8). Prompted by and discussed with krw@. Based on a diff by krw@. ok krw@
2021-02-02replace fgetln(3) with getline(3) in disklabelChristian Weisgerber
Since getline() returns a C string, we don't need to carry around the length separately. ok millert@
2021-02-02Properly implement 'rde med compare strict' and make sure that the orderClaudio Jeker
of prefixes is always correct. The strict RFC4271 way of checking MED is requires to check the neighbor AS and only do the check if the AS are equal. Because of this it is possible that inserting or removing a route reshuffles the total order. prefix_cmp() was extended to return the location where the decision happened: - 0 if the decision was before the MED comparison or med compare always is set - 1 if the decision happened after the MED comparison - 2 if the MED made caused the decision With this the new functions prefix_insert() and prefix_remove() are able to decide if more prefixes need to be evaluated (testall was not 0.) and if prefixes need to be re-evaluated after this one was put (testall = 2). There is a local redo list where prefixes where the MED resulted in a reshuffle are put on. After the new prefix is inserted all prefixes on the redo list are reinserted. Because now all affected MED routes get reevaluated the order is always correct.
2021-02-02Add a bunch of RPKI OIDsjob
RFC6482 - A Profile for Route Origin Authorizations (ROAs) RFC6484 - Certificate Policy (CP) for the RPKI RFC6493 - The RPKI Ghostbusters Record RFC8182 - The RPKI Repository Delta Protocol (RRDP) RFC8360 - RPKI Validation Reconsidered draft-ietf-sidrops-rpki-rta - A profile for RTAs Also in OpenSSL: https://github.com/openssl/openssl/commit/d3372c2f35495d0c61ab09daf7fba3ecbbb595aa OK sthen@ tb@ jsing@
2021-02-02Fix popup mouse position.Nicholas Marriott
2021-02-02introduce support for sending the If-Modified-Since header whileRobert Nagy
fetching over http(s) and use the timestamps from the remote server's Last-Modified header if available when saving local files this makes it possible to mirror files better with ftp(1) the new timestamp behaviour can be disabled with the new '-u' flag ok sthen@, input from sthen@ and gnezdo@
2021-02-02Fix use-after-free in dev_abort()Alexandre Ratchov
Fixes crash that can occur when an usb device is unplugged, found by edd@
2021-02-02article fix; from eddie yousephJason McIntyre
2021-02-02article fixes; from eddie yousephJason McIntyre
2021-02-02Improve the last commentDaniel Jakots
Remove a trailing white space, don't misspell misconfiguration and use https. ok jmc, claudio
2021-02-01Document MODOCAML_RUNDEPJeremie Courreges-Anglas
ok bket@ sthen@ (who initially suggested the if-not-native value under a similar name)
2021-02-01in case we're not a tty, don't do anything elseMarc Espie
this does fix the grep case
2021-02-01ESP path MTU discovery over IPv6 tunnel has been fixed. Add test.Alexander Bluhm
2021-02-01change "demote counter" / "demote count" to "demotion counter", ok deraadtStuart Henderson
2021-02-01describe pfsync(4)'s use of carpdemote, ok/tweak kn deraadtStuart Henderson
2021-02-01Take flows into consideration for policy lookup as initiator.tobhe
Fixes a bug where policies that only differ in their flow configuration lead to a handshake error. Found by claudio@ ok patrick@
2021-02-01dhclient(8): default_route_index(): poll(2) -> ppoll(2)cheloha
Use ppoll(2) instead of poll(2) in default_route_index(). Using ppoll(2) here forces us to use clock_gettime(2) to measure the timeout, which is less error-prone than using time(3). Part of a larger campaign in dhclient(8) to make "time stuff" more accurate and robust. Prompted by krw@. Based on a diff from krw@. ok krw@
2021-02-01The code in mdstore.c should stand on its own, so rename the globalMark Kettenis
variables used here instead of using the ones from config.c. ok deraadt@, kn@
2021-02-01Remove obsolete vnode operation vector declarations.Visa Hankala
OK bluhm@, claudio@, mpi@, semarie@
2021-02-01Use "EC/RSA key setup failure" to align error with othersTheo Buehler
ok eric jsing
2021-02-01Whitespacetobhe
2021-02-01handle #pinctrl-cells 2Jonathan Gray
needed for >= linux 5.9 dtbs on bbb ok kettenis@
2021-02-01Fix path MTU discovery for ESP tunneled in IPv6. We always wantAlexander Bluhm
short TCP segments or fragments encapsulated in ESP instead of fragmented ESP packets. Pass the don't fragment flag down along the stack so that dynamic routes with MTU are created eventually. with and OK markus@; OK tobhe@
2021-02-01Syntax of pf(4) route-to has changed. Adapt tests.Alexander Bluhm
2021-02-01Fix white spaces and wrap long lines.Alexander Bluhm
2021-02-01Start implementing conditionals for filters.Martin Pieuchot
Allows to check the existence of a variable in predicates, making it possible to trace syscall latency, as follow: syscall:select:entry { @start[pid] = nsecs; } syscall:select:return /@start[pid]/ { @usecs = hist((nsecs - @start[pid]) / 1000); delete(@start[pid]); }
2021-02-01Align the mixed naming for the variables used to reference toMarcus Glocker
bInterfaceNumber and bAlternateSetting as following: ifaceidx -> ifaceno altidx -> altno Suggested and ok mpi@
2021-02-01Add a no-detached choice to detach-on-destroy which detaches only ifNicholas Marriott
there are no other detached sessions to switch to, from Sencer Selcuk in GitHub issue 2553.
2021-02-01Netlock should be grabbed before pppx_if_find() call in pppxwrite().mvs
Otherwise this `pxi' can be killed by concurrent thread after context switch caused by following netlock. ok yasuoka@
2021-02-01Remove dummy TUNSIFMODE ioctl(2) call from pppac(4) and npppd(8). Sincemvs
OpenBSD 6.7 npppd(8) can't work over tun(4). ok yasuoka@
2021-02-01ifunit() was fully replaced by if_unit(9) and should go away.mvs
ok bluhm@ dlg@
2021-02-01update the pathname for the control socket path; from daniel jakotsJason McIntyre
clean up FILES while here ok claudio for the former
2021-02-01update currency exchange rates;Jason McIntyre
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-02 19:39:20 +0000