summaryrefslogtreecommitdiff
path: root/sys/net/if_pfsync.c
AgeCommit message (Expand)Author
2023-06-05pfsync_update_state() is too paranoid about pf_state::pfsync_state.Alexandr Nedvedicky
2023-05-26Remove net lock from DIOC{S,G}ETLIMITKlemens Nanni
2023-05-18sc_st_mtx is not sufficient protection to move state aroundAlexandr Nedvedicky
2023-04-28remove superfluous/invalid KASSERT() in pfsync_q_del().Alexandr Nedvedicky
2023-02-15pfsync(4) panics on NULL pointer dereference if thereAlexandr Nedvedicky
2023-01-04move the pf_state_tree_id type from pfvar.h to pfvar_priv.h.David Gwynne
2022-11-11rename pfsync_up() to pfsync_is_up()David Gwynne
2022-11-11Turn KASSERT() into if() to prevent state being inserted toAlexandr Nedvedicky
2022-11-06Constify pfsync_acts[]; OK dlgKlemens Nanni
2022-11-06get rid of pfsync_state_export.David Gwynne
2022-11-06move pfsync_state_import in if_pfsync.c to pf_state_import in pf.cDavid Gwynne
2022-11-05Fix kernel build without IPSEC option.Jan Klemkow
2022-04-21Introduce a dedicated link entries for snapshots in pfsync(4). The purposeAlexandr Nedvedicky
2022-04-20In pfsync there were some KASSERT hidden behind #ifdef PFSYNC_DEBUG.Alexander Bluhm
2022-04-14pf and pfsync are running without kernel lock, so the mutexes mustAlexander Bluhm
2022-04-07In pfsync(4) sc_len is modified with atomic operations except inAlexander Bluhm
2022-03-08merge iack_mtx, upd_c_mtx, del_mtx, ins_mtx and upd_mtx mutexes into singleAlexandr Nedvedicky
2022-02-25To fix crashes seen by Hrvoje with pfsync, IPsec and parallelAlexander Bluhm
2021-11-25Implement reference counting for IPsec tdbs. Not all cases areAlexander Bluhm
2021-11-11Allow pfi_kif_get() callers to pre-allocate buffer for new kif. If kifAlexandr Nedvedicky
2021-07-07pfsync_undefer() must be called outside of PF_LOCKAlexandr Nedvedicky
2021-06-25let pfsync_request_update actually retry when it overfills a packet.David Gwynne
2021-06-23augment the global pf state list with its own locks.David Gwynne
2021-06-23pfsync_undefer_notify needs to be careful before dereferecing state keys.David Gwynne
2021-06-17more consistently use pfsync_free_deferral to free the mbuf.David Gwynne
2021-06-15use getnsecuptime instead of getmicrouptime.David Gwynne
2021-06-15get the uptime before comparing to it.David Gwynne
2021-06-15rework pfsync deferal timeout handling.David Gwynne
2021-06-02With parallel execution of pf_test() two packets may try to update the sameAlexandr Nedvedicky
2021-03-10spellingJonathan Gray
2021-02-25we don't have to cast to caddr_t when calling m_copydata anymore.David Gwynne
2021-02-19we dont need to wrap some short lines.David Gwynne
2021-02-19check the state for PF_ROUTE when undeferring a packet, not the rule.David Gwynne
2021-02-09Activate use of PF_LOCK() by removing the WITH_PF_LOCK ifdefs.Patrick Wildt
2021-02-04make if_pfsync.c a better friend with PF_LOCKAlexandr Nedvedicky
2021-02-01change route-to so it sends packets to IPs instead of interfaces.David Gwynne
2021-01-18Convert ifunit() to if_unit(9).mvs
2021-01-04Minor refactoring in pf(4). Note that struct pfsync_state is noAlexander Bluhm
2020-12-12Rename the macro MCLGETI to MCLGETL and removes the dead parameter ifp.jan
2020-08-24Remove ptr_array from struct pf_rulesetkn
2020-08-21Leave default ifq_maxlen handling to ifq_init()kn
2020-08-11Run start routing without KERNEL_LOCK()kn
2020-07-29pfsync(4) holds pointer to corresponding `ifnet' as `sc_sync_if'. Thismvs
2020-07-10Change users of IFQ_SET_MAXLEN() and IFQ_IS_EMPTY() to use the "new" API.Patrick Wildt
2020-07-10Change users of IFQ_PURGE() to use the "new" API.Patrick Wildt
2020-06-28state import should accept AF_INET/AF_INET6 onlyAlexandr Nedvedicky
2020-06-24kernel: use gettime(9)/getuptime(9) in lieu of time_second(9)/time_uptime(9)cheloha
2020-04-12Stop processing packets under non-exclusive (read) netlock.Martin Pieuchot
2020-04-11Avoid triggering KASSERT for bogus reason in pfsync_sendout with PFSYNC_DEBUG.Stefan Sperling
2020-04-11fix build with PFSYNC_DEBUG by switching a format string from %d to %zdStefan Sperling