summaryrefslogtreecommitdiff
path: root/sys/net/pfvar.h
AgeCommit message (Expand)Author
2020-07-28Use the table on root always if current table is not active.YASUOKA Masahiko
2020-07-21rename PF_OPT_TABLE_PREFIX to PF_OPTIMIZER_TABLE_PFX and move it to pfvar.hHenning Brauer
2019-11-17"set delay" never worked as committed: the delay field was not copiedOtto Moerbeek
2019-07-09Fix previous commit which made src-node have a reference for the kif.YASUOKA Masahiko
2019-07-02When source address tracking record is used for "route-to", the nextYASUOKA Masahiko
2019-02-18Change ps_len of struct pfioc_states and psn_len of structAlexander Bluhm
2018-12-17Rename pf_anchor_remove() to pf_remove_anchor()kn
2018-12-10Remove useless macroskn
2018-12-09Zap duplicate signatureskn
2018-09-13Add reference counting for inet pcb, this will be needed when weAlexander Bluhm
2018-09-11- moving state look up outside of PF_LOCK()Alexandr Nedvedicky
2018-09-10Limit the fragment entry queue length to 64 per bucket. So we haveAlexander Bluhm
2018-09-08Split the pf(4) fragment reassembly queue into smaller parts.Alexander Bluhm
2018-07-22Fix arguments of pf_purge_expired_{src_nodes,rules}()Stefan Fritsch
2018-07-11provide pfi_group_addmember(), which makes the new member interface inheritHenning Brauer
2018-07-10The year is 2018.Henning Brauer
2018-07-10provide a generic packet delay functionality. packets to be delayed are markedHenning Brauer
2018-06-18Refactor the six ways to find TCP options into one new function. As a result:Richard Procter
2018-04-05Zap the obsolete PF_TRANS_ALTQ.Lawrence Teo
2018-02-09oh carp - i didnt mean to commit theseDavid Gwynne
2018-02-09use struct in_addr to represent an address.David Gwynne
2018-02-08make the watermarks/thresholds for entering and leaving syncookie mode whenHenning Brauer
2018-02-08add DIOCGETSYNFLWATS to get current synflood detection watermarks,Henning Brauer
2018-02-07provide counters for # of synfloods detected, # of syncookies sent,Henning Brauer
2018-02-06syncookies for pf.Henning Brauer
2017-12-29Make the functions which link the pf state keys to mbufs, inpcbs,Alexander Bluhm
2017-11-28The divert structure was using the port number to indicate thatAlexander Bluhm
2017-11-27The divert structure was using the port number to indicate thatAlexander Bluhm
2017-11-13add a generic packet rate matching filter. allows things likeHenning Brauer
2017-09-05- split pf_find_or_create_ruleset() to smaller chunks.Alexandr Nedvedicky
2017-08-14move pf_get_wscale + pf_get_mss prototypes to pfvar.h (diff shrinkage)Henning Brauer
2017-08-14add half-open tcp states accounting, road paved by sashanHenning Brauer
2017-08-13to change a state's state (that term is overloaded in pf, protocol stateHenning Brauer
2017-08-06Reduce contention on the NET_LOCK() by moving the logic of the pfpurgeMartin Pieuchot
2017-07-19Rework HFSC vs FQ-CoDel checksMike Belopuhov
2017-06-28Introduce a simple mechanism to select the appropriate queue managerMike Belopuhov
2017-06-28Extend pf queueing ops to include queue manager hooksMike Belopuhov
2017-06-26Fragments for a single connection (a combination of proto,src,dst,af)Alexander Bluhm
2017-05-30remove XXX from the comments marking "holes" in the ioctls. I see veryHenning Brauer
2017-05-30g/c DIOCCLRRULECTRSHenning Brauer
2017-05-30teach pf_build_tcp() about SACK, ok & with sashanHenning Brauer
2017-05-28Fix bad white spaces, wrap long lines, kill some empty lines.Alexander Bluhm
2017-05-15Enable the NET_LOCK(), take 3.Martin Pieuchot
2017-05-15Hook up FQ-CoDel to the tree and enable configuration in the pfctl(8)Mike Belopuhov
2017-05-02Provide pluggable queueing interface for pfMike Belopuhov
2017-03-17Revert the NET_LOCK() and bring back pf's contention lock for release.Martin Pieuchot
2017-02-22Amend a misleading comment mentioning ``ipintrq''.Martin Pieuchot
2017-01-30removes the pf_consistency_lock and protects the users withSebastian Benoit
2017-01-24A space here, a space there. Soon we're talking real whitespaceKenneth R Westerback
2016-12-29In pf_refragment6() use the valid route from pf_route6() insteadAlexander Bluhm