summaryrefslogtreecommitdiff
path: root/sys/net/pf_ioctl.c
AgeCommit message (Expand)Author
2018-10-01Allow DIOCRGETADDRS when securelevel(7) > 1kn
2018-09-11- moving state look up outside of PF_LOCK()Alexandr Nedvedicky
2018-07-22Fix arguments of pf_purge_expired_{src_nodes,rules}()Stefan Fritsch
2018-07-10provide a generic packet delay functionality. packets to be delayed are markedHenning Brauer
2018-04-24Use pf_rm_rule() instead of pool_put() to decrement references byAlexander Bluhm
2018-04-13Remove compatibility with pfctl from 6.1 and plug a few leaksMike Belopuhov
2018-04-05Explicitly check PF_TRANS_RULESET in DIOCXBEGIN, DIOCXCOMMIT, and DIOCXROLLBACK.Lawrence Teo
2018-02-08add DIOCGETSYNFLWATS to get current synflood detection watermarks,Henning Brauer
2018-02-07look ma, henning forgot to PF_LOCK/_UNLOCK in the new ioctls, ok procterHenning Brauer
2018-02-06syncookies for pf.Henning Brauer
2018-02-06some finger muscle workout:Henning Brauer
2018-01-19In pfioctl() a pf unlock was missing in the error path.Alexander Bluhm
2017-11-28The divert structure was using the port number to indicate thatAlexander Bluhm
2017-11-13add a generic packet rate matching filter. allows things likeHenning Brauer
2017-10-31- add one more softnet taskqAlexandr Nedvedicky
2017-10-30- fine tuning PF_LOCK in pfioctl()Alexandr Nedvedicky
2017-08-11Remove NET_LOCK()'s argument.Martin Pieuchot
2017-08-06Reduce contention on the NET_LOCK() by moving the logic of the pfpurgeMartin Pieuchot
2017-07-27For pf the anchor is a C string so ensure that the value passed in via ioctlClaudio Jeker
2017-07-19Rework HFSC vs FQ-CoDel checksMike Belopuhov
2017-07-05Convert pf tagname malloc(9) into pool_get(9) to make it MP safe.Alexander Bluhm
2017-06-28Introduce a simple mechanism to select the appropriate queue managerMike Belopuhov
2017-06-28Tighten up FQ-CoDel vs HFSC checksMike Belopuhov
2017-06-05- let's add PF_LOCK()Alexandr Nedvedicky
2017-06-01Return time_uptime as value for when pf was enabled instead ofPatrick Wildt
2017-05-30g/c DIOCCLRRULECTRSHenning Brauer
2017-05-15Enable the NET_LOCK(), take 3.Martin Pieuchot
2017-05-15Hook up FQ-CoDel to the tree and enable configuration in the pfctl(8)Mike Belopuhov
2017-05-02Provide pluggable queueing interface for pfMike Belopuhov
2017-04-21Speed up DIOCKILLSTATES by using the RB tree index if all fields usedYASUOKA Masahiko
2017-03-17Revert the NET_LOCK() and bring back pf's contention lock for release.Martin Pieuchot
2017-01-30removes the pf_consistency_lock and protects the users withSebastian Benoit
2017-01-24A space here, a space there. Soon we're talking real whitespaceKenneth R Westerback
2016-11-16Kill recursive splsoftnet()s.Martin Pieuchot
2016-10-28- once rule should not attempt to remove its parent rule.Alexandr Nedvedicky
2016-10-26Put union pf_headers and struct pf_pdesc into separate header fileAlexander Bluhm
2016-09-27roll back turning RB into RBT until i get better at this process.David Gwynne
2016-09-27move pf from the RB macros to the RBT functions.David Gwynne
2016-09-15all pools have their ipl set via pool_setipl, so fold it into pool_init.David Gwynne
2016-09-03Let purge thread to remove once rules, not packets.Alexandr Nedvedicky
2016-09-02pool_setipl for pf bitsDavid Gwynne
2015-12-03Add sizes to most free calls. OK sashan@ tedu@Claudio Jeker
2015-12-03allocate PF tags as M_RTABLE vice M_TEMPBret Lambert
2015-12-03Rename pf_unlink_state() to pf_remove_state() so the name does notAlexander Bluhm
2015-11-24No need for <net/if_types.h>Martin Pieuchot
2015-11-23There's no longer a need to include <net/hfsc.h> in <net/if_var.h>Martin Pieuchot
2015-11-20shuffle struct ifqueue so in flight mbufs are protected by a mutex.David Gwynne
2015-10-13- pf_insert_src_node(): global argument (arg6) is useless, functionAlexandr Nedvedicky
2015-09-04The pf_osfp_pl and pf_osfp_entry_pl never get used in interrupt context.Mark Kettenis
2015-07-21- added /* FALLTHROUGH */ comments, typecasts (u_int32_t)-1, ...Alexandr Nedvedicky