summaryrefslogtreecommitdiff
path: root/sys/net/pf_ioctl.c
AgeCommit message (Expand)Author
2023-07-06big update to pfsync to try and clean up locking in particular.David Gwynne
2023-07-04This diff limits the number of transactions/ticketsAlexandr Nedvedicky
2023-07-04The recent change to DIOCGETRULE allows applications whichAlexandr Nedvedicky
2023-07-04remove unused global varJonathan Gray
2023-06-30Introduce M_PF type for pf(4) related memory allocations. Currently usedVitaliy Makkoveev
2023-06-28pfioctl() must make sure pfioctl_rw() gets unlocked before function returns.Alexandr Nedvedicky
2023-06-28Revert r1.406 "Close all pf transactions before opening a new one in DIOCGETR...Klemens Nanni
2023-06-27Use shared net lock for DIOCGETIFACESKlemens Nanni
2023-06-27Remove net lock from DIOC{SET,CLR}IFFLAGKlemens Nanni
2023-06-26Close all pf transactions before opening a new one in DIOCGETRULES.Claudio Jeker
2023-05-26Remove net lock from DIOC{S,G}ETLIMITKlemens Nanni
2023-05-11pools are always initialised, zap overcautious NULL checkKlemens Nanni
2023-05-03Remove net lock from DIOCGETRULESET and DIOCGETRULESETSKlemens Nanni
2023-04-29Remove net lock from DIOCGETQUEUEKlemens Nanni
2023-04-28This change speeds up DIOCGETRULE ioctl(2) which pfctl(8) uses toAlexandr Nedvedicky
2023-04-28Remove net lock from DIOCGETQUEUESKlemens Nanni
2023-04-27Remove net lock from DIOCGETTIMEOUTKlemens Nanni
2023-04-26Introduce `rtlabel_mtx' mutex(9) to protect route labels storage. ThisVitaliy Makkoveev
2023-01-06PF_ANCHOR_STACK_MAX is insufficient protection against stack overflow.Alexandr Nedvedicky
2023-01-05more consistently name pf_state * variables "st".David Gwynne
2023-01-04move the pf_state_tree_id type from pfvar.h to pfvar_priv.h.David Gwynne
2023-01-04move the pf_state_tree rb tree type from pfvar.h to pfvar_priv.hDavid Gwynne
2022-12-21prefix pf_state_key and pf_state_item struct bits to make them more unique.David Gwynne
2022-11-25revert pf.c r1.1152 again: move pf_purge out from under the kernel lockAlexander Bluhm
2022-11-11try pf.c r1.1143 again: move pf_purge out from under the kernel lockDavid Gwynne
2022-11-09simplify expiration of 'once' rules.Alexandr Nedvedicky
2022-11-07revert "move pf_purge out from under the kernel lock".David Gwynne
2022-11-07move pf_purge out from under the kernel lock and avoid the hogging cpuDavid Gwynne
2022-11-06move pfsync_state_import in if_pfsync.c to pf_state_import in pf.cDavid Gwynne
2022-11-06make /dev/pf a clonable device.David Gwynne
2022-08-06Clean up the netlock macros. Merge NET_RLOCK_IN_SOFTNET andAlexander Bluhm
2022-07-28Release PF und NET lock before calling copyin for DIOCXCOMMIT.Moritz Buhl
2022-07-20Add a pool for the allocation of the pf_anchor struct.Moritz Buhl
2022-06-26Allow waiting during ktable allocation in pf_ioctl.mbuhl
2022-05-10move memory allocations in pfr_add_tables() out ofAlexandr Nedvedicky
2022-04-29Release PF und NET lock before calling copyout for DIOCIGETIFACES.mbuhl
2022-04-09Release PF und NET lock before calling copyin for DIOCXROLLBACK.mbuhl
2022-04-07Release PF und NET lock before calling copyin and copyout formbuhl
2022-04-07pf_rollback_rules always has the same return value, make it void.mbuhl
2022-04-04pf_validate_range() must not assume rdr ports are in network order.Alexandr Nedvedicky
2022-03-23Use goto fail consistently to leave the giant switch in pfioctl().Alexander Bluhm
2022-03-23resurrect pf_consistency_lock as pfioctl_rw this time. pfioctl_rwAlexandr Nedvedicky
2022-02-16check pf rule "set prio" values consistently.David Gwynne
2022-02-09let pfattach() to also initialize pf_default_rule_new to avoidAlexandr Nedvedicky
2022-01-24An af-to pf rule must have an address family naf to use afterAlexander Bluhm
2022-01-11move allocations in DIOCSADDRULE and DIOCHANGERULE outside of locks.Alexandr Nedvedicky
2021-12-26DIOCHANGERRULE ioctl must set pointer to ruleset in rule it inserts.Alexandr Nedvedicky
2021-12-26make 'set skip on ...' in pf.conf dynamicAlexandr Nedvedicky
2021-11-16move memory allocations in pfr_add_addrs() outside of NET_LOCK()/PF_LOCK()Alexandr Nedvedicky
2021-11-11Allow pfi_kif_get() callers to pre-allocate buffer for new kif. If kifAlexandr Nedvedicky