summaryrefslogtreecommitdiff
path: root/sys/net/if_pfsync.h
AgeCommit message (Expand)Author
2012-06-29add ESN-related bits missed in the previous commitMike Belopuhov
2012-06-29Add support for the Extended (64-bit) Sequence Number as definedMike Belopuhov
2010-11-29get rid of struct pfsync_pkt. it was used to store data on the stack toDavid Gwynne
2010-07-09Add support for using IPsec in multiple rdomains.Reyk Floeter
2010-01-12factor m_pulldown out of the message handlers up into pfsync_input nowDavid Gwynne
2010-01-10replace a pad in the pfsync subheader with a length field. it stores theDavid Gwynne
2009-11-09bump pfsync protocol versionDavid Gwynne
2009-11-03rtables are stacked on rdomains (it is possible to have multiple routingClaudio Jeker
2009-06-14enable support for deferring the packet that creates a state so that yourDavid Gwynne
2009-03-31do not include space in the end of the from for a hmac. after discussionDavid Gwynne
2009-02-16pfsync v5, mostly written at n2k9, but based on work done at n2k8.David Gwynne
2008-06-29Simplify state creation code; merge state import/export code between pfsyncRyan Thomas McBride
2008-06-17Crank PFSYNC_VERSION, lots has changed in struct pfsync_state due to theRyan Thomas McBride
2008-05-29Second half of PF state table rearrangement.Ryan Thomas McBride
2007-12-14add sysctl entry points into various network layers, in particular toTheo de Raadt
2007-05-31First step of rearranging pf's state table internals...Ryan Thomas McBride
2006-10-31make pfsync a clonable too, but prevent more than one instance fromHenning Brauer
2006-05-28Only preemptively increase the replay counter for outbound TDBs.Ryan Thomas McBride
2005-11-04crank pf_state and pf_src_node byte and packet counters to u_in64_t, sinceRyan Thomas McBride
2005-10-27Basic support for attaching states from pfsync to the correct rules.Ryan Thomas McBride
2005-09-28Improve the safety of pf IOCTLs, taking into account that some paths can sleep.Christopher Pascoe
2005-08-16Only send the PFSS_TIMESTAMP timestamp bit across the wire, in case weChristopher Pascoe
2005-08-16Synchronise timestamp modulation and scrubbing min ttl information.Christopher Pascoe
2005-08-13Partial backout of previous revision, reinstates the ability to propagateChristopher Pascoe
2005-08-03Do not send "deletion" messages for states created by other pfsync peers whenChristopher Pascoe
2005-08-03use flag macro instead of constantChristopher Pascoe
2005-05-28Add SA replay counter synchronization to pfsync(4). Required for IPsecHakan Olsson
2005-01-20Use syncdev instead of syncif in ifconfig, and modify ioctl struct pfsyncreqRyan Thomas McBride
2004-12-14move the ioctls w/ all the other ifaces; mcbride@ okMichael Shalayeff
2004-11-16Fix for PR3983Ryan Thomas McBride
2004-08-03Allow a unicast ip address to be specified for pfsync to send it's stateRyan Thomas McBride
2004-07-13spelling; dlgTheo de Raadt
2004-04-28pfsync stats fixups:Ryan Thomas McBride
2004-03-22Support for best effort bulk transfers of states when pfsync syncif isRyan Thomas McBride
2004-02-20Make pfsync deal with clearing states bound to a group or interface (egRyan Thomas McBride
2004-02-10Make pfsync work correctly with IP options on 64-bit alignmentRyan Thomas McBride
2004-01-22- Include the value of pf_state.timeout in pfsync messagesRyan Thomas McBride
2004-01-18Port is already stored in network byte order, no need to convert.Ryan Thomas McBride
2003-12-31Many improvements to the handling of interfaces in PF.Cedric Berger
2003-12-28Add a new PFSYNC_ACT_UREQ message type.Ryan Thomas McBride
2003-12-15sc_sp is a #define on some architectures, use a different nameTheo de Raadt
2003-12-15Fix whitespace screwups before henning wakes up.Ryan Thomas McBride
2003-12-15Add initial support for pf state synchronization over the network.Ryan Thomas McBride
2003-11-08Add 'no-sync' state option to prevent state transition messages for statesRyan Thomas McBride
2002-12-11unpeeMichael Shalayeff
2002-11-29expose state table changesMichael Shalayeff