summaryrefslogtreecommitdiff
path: root/sys/net/if_pfsync.h
AgeCommit message (Expand)Author
2022-11-11rename pfsync_up() to pfsync_is_up()David Gwynne
2022-11-06move pfsync_state_import in if_pfsync.c to pf_state_import in pf.cDavid Gwynne
2021-07-07pfsync_undefer() must be called outside of PF_LOCKAlexandr Nedvedicky
2021-03-10spellingJonathan Gray
2021-02-04make if_pfsync.c a better friend with PF_LOCKAlexandr Nedvedicky
2018-09-11- moving state look up outside of PF_LOCK()Alexandr Nedvedicky
2017-04-14Pass down the address family through the pr_input calls. ThisAlexander Bluhm
2017-02-20pfsync(4) percpu countersJeremie Courreges-Anglas
2017-01-29Change the IPv4 pr_input function to the way IPv6 is implemented,Alexander Bluhm
2017-01-25Since raw_input() and route_input() are gone from pr_input, we canAlexander Bluhm
2017-01-20Stop using pfsockaddr_union outside of pf so that we can remove its usageClaudio Jeker
2015-01-24Userland (base & ports) was adapted to always include <netinet/in.h>Theo de Raadt
2013-10-24Move obvious kernel prototypes (and structure's with kernel pointers,Theo de Raadt
2012-06-29add ESN-related bits missed in the previous commitMike Belopuhov
2012-06-29Add support for the Extended (64-bit) Sequence Number as definedMike Belopuhov
2010-11-29get rid of struct pfsync_pkt. it was used to store data on the stack toDavid Gwynne
2010-07-09Add support for using IPsec in multiple rdomains.Reyk Floeter
2010-01-12factor m_pulldown out of the message handlers up into pfsync_input nowDavid Gwynne
2010-01-10replace a pad in the pfsync subheader with a length field. it stores theDavid Gwynne
2009-11-09bump pfsync protocol versionDavid Gwynne
2009-11-03rtables are stacked on rdomains (it is possible to have multiple routingClaudio Jeker
2009-06-14enable support for deferring the packet that creates a state so that yourDavid Gwynne
2009-03-31do not include space in the end of the from for a hmac. after discussionDavid Gwynne
2009-02-16pfsync v5, mostly written at n2k9, but based on work done at n2k8.David Gwynne
2008-06-29Simplify state creation code; merge state import/export code between pfsyncRyan Thomas McBride
2008-06-17Crank PFSYNC_VERSION, lots has changed in struct pfsync_state due to theRyan Thomas McBride
2008-05-29Second half of PF state table rearrangement.Ryan Thomas McBride
2007-12-14add sysctl entry points into various network layers, in particular toTheo de Raadt
2007-05-31First step of rearranging pf's state table internals...Ryan Thomas McBride
2006-10-31make pfsync a clonable too, but prevent more than one instance fromHenning Brauer
2006-05-28Only preemptively increase the replay counter for outbound TDBs.Ryan Thomas McBride
2005-11-04crank pf_state and pf_src_node byte and packet counters to u_in64_t, sinceRyan Thomas McBride
2005-10-27Basic support for attaching states from pfsync to the correct rules.Ryan Thomas McBride
2005-09-28Improve the safety of pf IOCTLs, taking into account that some paths can sleep.Christopher Pascoe
2005-08-16Only send the PFSS_TIMESTAMP timestamp bit across the wire, in case weChristopher Pascoe
2005-08-16Synchronise timestamp modulation and scrubbing min ttl information.Christopher Pascoe
2005-08-13Partial backout of previous revision, reinstates the ability to propagateChristopher Pascoe
2005-08-03Do not send "deletion" messages for states created by other pfsync peers whenChristopher Pascoe
2005-08-03use flag macro instead of constantChristopher Pascoe
2005-05-28Add SA replay counter synchronization to pfsync(4). Required for IPsecHakan Olsson
2005-01-20Use syncdev instead of syncif in ifconfig, and modify ioctl struct pfsyncreqRyan Thomas McBride
2004-12-14move the ioctls w/ all the other ifaces; mcbride@ okMichael Shalayeff
2004-11-16Fix for PR3983Ryan Thomas McBride
2004-08-03Allow a unicast ip address to be specified for pfsync to send it's stateRyan Thomas McBride
2004-07-13spelling; dlgTheo de Raadt
2004-04-28pfsync stats fixups:Ryan Thomas McBride
2004-03-22Support for best effort bulk transfers of states when pfsync syncif isRyan Thomas McBride
2004-02-20Make pfsync deal with clearing states bound to a group or interface (egRyan Thomas McBride
2004-02-10Make pfsync work correctly with IP options on 64-bit alignmentRyan Thomas McBride
2004-01-22- Include the value of pf_state.timeout in pfsync messagesRyan Thomas McBride