summaryrefslogtreecommitdiff
path: root/sys/net/pfvar.h
AgeCommit message (Expand)Author
2018-06-18Refactor the six ways to find TCP options into one new function. As a result:Richard Procter
2018-04-05Zap the obsolete PF_TRANS_ALTQ.Lawrence Teo
2018-02-09oh carp - i didnt mean to commit theseDavid Gwynne
2018-02-09use struct in_addr to represent an address.David Gwynne
2018-02-08make the watermarks/thresholds for entering and leaving syncookie mode whenHenning Brauer
2018-02-08add DIOCGETSYNFLWATS to get current synflood detection watermarks,Henning Brauer
2018-02-07provide counters for # of synfloods detected, # of syncookies sent,Henning Brauer
2018-02-06syncookies for pf.Henning Brauer
2017-12-29Make the functions which link the pf state keys to mbufs, inpcbs,Alexander Bluhm
2017-11-28The divert structure was using the port number to indicate thatAlexander Bluhm
2017-11-27The divert structure was using the port number to indicate thatAlexander Bluhm
2017-11-13add a generic packet rate matching filter. allows things likeHenning Brauer
2017-09-05- split pf_find_or_create_ruleset() to smaller chunks.Alexandr Nedvedicky
2017-08-14move pf_get_wscale + pf_get_mss prototypes to pfvar.h (diff shrinkage)Henning Brauer
2017-08-14add half-open tcp states accounting, road paved by sashanHenning Brauer
2017-08-13to change a state's state (that term is overloaded in pf, protocol stateHenning Brauer
2017-08-06Reduce contention on the NET_LOCK() by moving the logic of the pfpurgeMartin Pieuchot
2017-07-19Rework HFSC vs FQ-CoDel checksMike Belopuhov
2017-06-28Introduce a simple mechanism to select the appropriate queue managerMike Belopuhov
2017-06-28Extend pf queueing ops to include queue manager hooksMike Belopuhov
2017-06-26Fragments for a single connection (a combination of proto,src,dst,af)Alexander Bluhm
2017-05-30remove XXX from the comments marking "holes" in the ioctls. I see veryHenning Brauer
2017-05-30g/c DIOCCLRRULECTRSHenning Brauer
2017-05-30teach pf_build_tcp() about SACK, ok & with sashanHenning Brauer
2017-05-28Fix bad white spaces, wrap long lines, kill some empty lines.Alexander Bluhm
2017-05-15Enable the NET_LOCK(), take 3.Martin Pieuchot
2017-05-15Hook up FQ-CoDel to the tree and enable configuration in the pfctl(8)Mike Belopuhov
2017-05-02Provide pluggable queueing interface for pfMike Belopuhov
2017-03-17Revert the NET_LOCK() and bring back pf's contention lock for release.Martin Pieuchot
2017-02-22Amend a misleading comment mentioning ``ipintrq''.Martin Pieuchot
2017-01-30removes the pf_consistency_lock and protects the users withSebastian Benoit
2017-01-24A space here, a space there. Soon we're talking real whitespaceKenneth R Westerback
2016-12-29In pf_refragment6() use the valid route from pf_route6() insteadAlexander Bluhm
2016-11-22Fold union pf_headers buffer into struct pf_pdesc (enabled by pfvar_priv.h).Richard Procter
2016-11-14Instead of passing an extra mbuf pointer to pf_route(), it shouldAlexander Bluhm
2016-10-27Pass a struct pf_pdesc to pf_route() like it is done in the otherAlexander Bluhm
2016-10-26Put union pf_headers and struct pf_pdesc into separate header fileAlexander Bluhm
2016-10-18split pf_send_tcp() into the part that builds the mbuf and the actualHenning Brauer
2016-09-27roll back turning RB into RBT until i get better at this process.David Gwynne
2016-09-27move pf from the RB macros to the RBT functions.David Gwynne
2016-09-03Let purge thread to remove once rules, not packets.Alexandr Nedvedicky
2016-09-03Reduce the factor of the limits derived form NMBCLUSTERS. We wantAlexander Bluhm
2016-08-20Push 'field changed' guards into 'change field' functions;Richard Procter
2016-08-17Reintroduce 5.3-style checksum modification to preserve end-to-end checksumsprocter
2016-07-19don't hide globals between function prototypes; ok phessler bennoHenning Brauer
2016-07-18no more cbq_opts - CBQ is gone, ok mpi phessler bennoHenning Brauer
2016-07-18Hide pf internals by moving code from in_ouraddr() to pf_ouraddr().Alexander Bluhm
2016-03-29- packet must keep reference to statekeyAlexandr Nedvedicky
2016-01-31- m_pkthdr.pf.statekey changes are not ready for 5.9, I must back them outAlexandr Nedvedicky
2016-01-07- retrying to commit earlier change, which got backed outAlexandr Nedvedicky