summaryrefslogtreecommitdiff
path: root/sys/net/if_pfsync.c
AgeCommit message (Expand)Author
2024-05-24pfsync must let to progress state for destination peerAlexandr Nedvedicky
2024-02-13Merge struct route and struct route_in6.Alexander Bluhm
2023-12-23Backout always allocate per-CPU statistics counters for networkAlexander Bluhm
2023-12-22Always allocate per-CPU statistics counters for network interfaceVitaliy Makkoveev
2023-10-03Reinstate setting rtableid based on rdomain for pfsync,Stuart Henderson
2023-09-16Allow counters_read(9) to take an optional scratch buffer.Martin Pieuchot
2023-08-18NBPFILTER not NBPFJonathan Gray
2023-07-31don't let pfsync send an insert message for a state pfsync just insertedDavid Gwynne
2023-07-06big update to pfsync to try and clean up locking in particular.David Gwynne
2023-06-05pfsync_update_state() is too paranoid about pf_state::pfsync_state.Alexandr Nedvedicky
2023-05-26Remove net lock from DIOC{S,G}ETLIMITKlemens Nanni
2023-05-18sc_st_mtx is not sufficient protection to move state aroundAlexandr Nedvedicky
2023-04-28remove superfluous/invalid KASSERT() in pfsync_q_del().Alexandr Nedvedicky
2023-02-15pfsync(4) panics on NULL pointer dereference if thereAlexandr Nedvedicky
2023-01-04move the pf_state_tree_id type from pfvar.h to pfvar_priv.h.David Gwynne
2022-11-11rename pfsync_up() to pfsync_is_up()David Gwynne
2022-11-11Turn KASSERT() into if() to prevent state being inserted toAlexandr Nedvedicky
2022-11-06Constify pfsync_acts[]; OK dlgKlemens Nanni
2022-11-06get rid of pfsync_state_export.David Gwynne
2022-11-06move pfsync_state_import in if_pfsync.c to pf_state_import in pf.cDavid Gwynne
2022-11-05Fix kernel build without IPSEC option.Jan Klemkow
2022-04-21Introduce a dedicated link entries for snapshots in pfsync(4). The purposeAlexandr Nedvedicky
2022-04-20In pfsync there were some KASSERT hidden behind #ifdef PFSYNC_DEBUG.Alexander Bluhm
2022-04-14pf and pfsync are running without kernel lock, so the mutexes mustAlexander Bluhm
2022-04-07In pfsync(4) sc_len is modified with atomic operations except inAlexander Bluhm
2022-03-08merge iack_mtx, upd_c_mtx, del_mtx, ins_mtx and upd_mtx mutexes into singleAlexandr Nedvedicky
2022-02-25To fix crashes seen by Hrvoje with pfsync, IPsec and parallelAlexander Bluhm
2021-11-25Implement reference counting for IPsec tdbs. Not all cases areAlexander Bluhm
2021-11-11Allow pfi_kif_get() callers to pre-allocate buffer for new kif. If kifAlexandr Nedvedicky
2021-07-07pfsync_undefer() must be called outside of PF_LOCKAlexandr Nedvedicky
2021-06-25let pfsync_request_update actually retry when it overfills a packet.David Gwynne
2021-06-23augment the global pf state list with its own locks.David Gwynne
2021-06-23pfsync_undefer_notify needs to be careful before dereferecing state keys.David Gwynne
2021-06-17more consistently use pfsync_free_deferral to free the mbuf.David Gwynne
2021-06-15use getnsecuptime instead of getmicrouptime.David Gwynne
2021-06-15get the uptime before comparing to it.David Gwynne
2021-06-15rework pfsync deferal timeout handling.David Gwynne
2021-06-02With parallel execution of pf_test() two packets may try to update the sameAlexandr Nedvedicky
2021-03-10spellingJonathan Gray
2021-02-25we don't have to cast to caddr_t when calling m_copydata anymore.David Gwynne
2021-02-19we dont need to wrap some short lines.David Gwynne
2021-02-19check the state for PF_ROUTE when undeferring a packet, not the rule.David Gwynne
2021-02-09Activate use of PF_LOCK() by removing the WITH_PF_LOCK ifdefs.Patrick Wildt
2021-02-04make if_pfsync.c a better friend with PF_LOCKAlexandr Nedvedicky
2021-02-01change route-to so it sends packets to IPs instead of interfaces.David Gwynne
2021-01-18Convert ifunit() to if_unit(9).mvs
2021-01-04Minor refactoring in pf(4). Note that struct pfsync_state is noAlexander Bluhm
2020-12-12Rename the macro MCLGETI to MCLGETL and removes the dead parameter ifp.jan
2020-08-24Remove ptr_array from struct pf_rulesetkn
2020-08-21Leave default ifq_maxlen handling to ifq_init()kn