summaryrefslogtreecommitdiff
path: root/sys/net/if_pfsync.c
AgeCommit message (Expand)Author
2022-04-21Introduce a dedicated link entries for snapshots in pfsync(4). The purposeAlexandr Nedvedicky
2022-04-20In pfsync there were some KASSERT hidden behind #ifdef PFSYNC_DEBUG.Alexander Bluhm
2022-04-14pf and pfsync are running without kernel lock, so the mutexes mustAlexander Bluhm
2022-04-07In pfsync(4) sc_len is modified with atomic operations except inAlexander Bluhm
2022-03-08merge iack_mtx, upd_c_mtx, del_mtx, ins_mtx and upd_mtx mutexes into singleAlexandr Nedvedicky
2022-02-25To fix crashes seen by Hrvoje with pfsync, IPsec and parallelAlexander Bluhm
2021-11-25Implement reference counting for IPsec tdbs. Not all cases areAlexander Bluhm
2021-11-11Allow pfi_kif_get() callers to pre-allocate buffer for new kif. If kifAlexandr Nedvedicky
2021-07-07pfsync_undefer() must be called outside of PF_LOCKAlexandr Nedvedicky
2021-06-25let pfsync_request_update actually retry when it overfills a packet.David Gwynne
2021-06-23augment the global pf state list with its own locks.David Gwynne
2021-06-23pfsync_undefer_notify needs to be careful before dereferecing state keys.David Gwynne
2021-06-17more consistently use pfsync_free_deferral to free the mbuf.David Gwynne
2021-06-15use getnsecuptime instead of getmicrouptime.David Gwynne
2021-06-15get the uptime before comparing to it.David Gwynne
2021-06-15rework pfsync deferal timeout handling.David Gwynne
2021-06-02With parallel execution of pf_test() two packets may try to update the sameAlexandr Nedvedicky
2021-03-10spellingJonathan Gray
2021-02-25we don't have to cast to caddr_t when calling m_copydata anymore.David Gwynne
2021-02-19we dont need to wrap some short lines.David Gwynne
2021-02-19check the state for PF_ROUTE when undeferring a packet, not the rule.David Gwynne
2021-02-09Activate use of PF_LOCK() by removing the WITH_PF_LOCK ifdefs.Patrick Wildt
2021-02-04make if_pfsync.c a better friend with PF_LOCKAlexandr Nedvedicky
2021-02-01change route-to so it sends packets to IPs instead of interfaces.David Gwynne
2021-01-18Convert ifunit() to if_unit(9).mvs
2021-01-04Minor refactoring in pf(4). Note that struct pfsync_state is noAlexander Bluhm
2020-12-12Rename the macro MCLGETI to MCLGETL and removes the dead parameter ifp.jan
2020-08-24Remove ptr_array from struct pf_rulesetkn
2020-08-21Leave default ifq_maxlen handling to ifq_init()kn
2020-08-11Run start routing without KERNEL_LOCK()kn
2020-07-29pfsync(4) holds pointer to corresponding `ifnet' as `sc_sync_if'. Thismvs
2020-07-10Change users of IFQ_SET_MAXLEN() and IFQ_IS_EMPTY() to use the "new" API.Patrick Wildt
2020-07-10Change users of IFQ_PURGE() to use the "new" API.Patrick Wildt
2020-06-28state import should accept AF_INET/AF_INET6 onlyAlexandr Nedvedicky
2020-06-24kernel: use gettime(9)/getuptime(9) in lieu of time_second(9)/time_uptime(9)cheloha
2020-04-12Stop processing packets under non-exclusive (read) netlock.Martin Pieuchot
2020-04-11Avoid triggering KASSERT for bogus reason in pfsync_sendout with PFSYNC_DEBUG.Stefan Sperling
2020-04-11fix build with PFSYNC_DEBUG by switching a format string from %d to %zdStefan Sperling
2019-11-07remove the detach and linkstate hooks when the parent is going away.David Gwynne
2019-11-07turn the linkstate hooks into a task list, like the detach hooks.David Gwynne
2019-11-06replace the hooks used with if_detachhooks with a task list.David Gwynne
2019-06-10Use mallocarray(9) & put some free(9) sizes for M_IPMOPTS allocations.Martin Pieuchot
2019-06-04pfsync_sendout() requires PF_LOCK()Alexandr Nedvedicky
2019-02-10"non-existant" is one of those words that don't exist, so use "non-existent"Peter Hessler
2018-10-03Fix a race condition that affects pfsync interface deletion.Visa Hankala
2018-10-02- pfsync: avoid a recursion on PF_LOCKAlexandr Nedvedicky
2018-09-11- moving state look up outside of PF_LOCK()Alexandr Nedvedicky
2018-08-24- cosmetic tweak to if_pfsync.cAlexandr Nedvedicky
2018-02-19Remove almost unused `flags' argument of suser().Martin Pieuchot
2018-01-09Creating a cloned interface could return ENOMEM due to temporaryAlexander Bluhm