summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2023-12-08Add spaces around '='. style(9) fix, no functional changes.Vitaliy Makkoveev
2023-12-08Introduce `sc_mtx' mutex(9) to protect the most of pflow_softcVitaliy Makkoveev
2023-12-03Make rtm_senddesync_timer() timeout(9) handler mpsafe. solock() protectsVitaliy Makkoveev
2023-12-01pipex(4) layer is completely mp-safe, move the pipex_timer() timeout(9)Vitaliy Makkoveev
2023-12-01Prevent race between pf_test() and pf_purge_expired_states().Alexandr Nedvedicky
2023-11-29remove unused VXLANMTU definitionDenis Fondras
2023-11-28Remove struct inpcb from in6_embedscope() parameters.Alexander Bluhm
2023-11-23avoid passing weird mbuf chains to pf when pushing out a veb.David Gwynne
2023-11-18ports specified on tunnel destination addresses are invalid.David Gwynne
2023-11-13Fix rt_setgate() error handling.Alexander Bluhm
2023-11-12Use constant sockaddr in route lookup.Alexander Bluhm
2023-11-12Do not modify route info sockaddr in rtm_xaddrs().Alexander Bluhm
2023-11-12rt_gateway and rt_gwroute use X protections now.David Gwynne
2023-11-12rt_setgate performs a series of tweaks to an rtable and the routes inDavid Gwynne
2023-11-11Pass constant struct sockaddr to interface lookup functions.Alexander Bluhm
2023-11-11start documenting the protections or locks needed for struct rtentry fields.David Gwynne
2023-11-11Remove unused parameter dst from art_get().Alexander Bluhm
2023-11-10rtable_match() takes constant destination.Alexander Bluhm
2023-11-10Make ifq and ifiq interface MP safe.Alexander Bluhm
2023-11-09Remove delayed timeout(9) initialization. timeout_set*() only assignVitaliy Makkoveev
2023-10-27Forward TCP LRO disabling to parent devices.Jan Klemkow
2023-10-23Prevent wg(4) stuck on peer destruction.Vitaliy Makkoveev
2023-10-12pflog(4) logs packet dropped by default rule with block.Alexander Bluhm
2023-10-11Prevent deref-after-free when tdb_timeout() fires on invalid new tdb.Tobias Heider
2023-10-10pf(4) must not pass packet if state cannot be created.Alexander Bluhm
2023-10-10Remove dead code in pf_pull_hdr().Alexander Bluhm
2023-10-08Revert commitid: KtmyJEoS0WWxmlZ5Claudio Jeker
2023-10-05Protect interface queues with read once and mutex.Alexander Bluhm
2023-10-03Reinstate setting rtableid based on rdomain for pfsync,Stuart Henderson
2023-09-29Make sure pfkeyv2_parsemessage() only returns 0 if the message wasTobias Heider
2023-09-29Only forward validated pfkey messages to promiscuous listeners.Tobias Heider
2023-09-26Have wg(4) copy the priority from the inner packet to the outer encryptedStuart Henderson
2023-09-24The stage queue should be freeed when wg_peer is destroyed.YASUOKA Masahiko
2023-09-16Allow counters_read(9) to take an optional scratch buffer.Martin Pieuchot
2023-09-08revert previousChristian Weisgerber
2023-09-07pf(4) ignores 'keep state' and 'nat-to' actions for unsolicitedAlexandr Nedvedicky
2023-08-18INITITIATION_COST -> INITIATION_COSTJonathan Gray
2023-08-18maximium -> maximumJonathan Gray
2023-08-18NBPFILTER not NBPFJonathan Gray
2023-08-15scrub the mbuf flowid for packets going out a sec interface.David Gwynne
2023-08-15sec_start needs to show bpf the packets going out.David Gwynne
2023-08-11better support queuing (hfsc) on sec(4)David Gwynne
2023-08-10Table persistent flag (PFR_TFLAG_PERSIST) won't get setAlexandr Nedvedicky
2023-08-09remove some uneeded includesJonathan Gray
2023-08-08if sec is being destroyed, prevent it from being brought up again.David Gwynne
2023-08-08try to avoid a deadlock between sec_down and sec_send.David Gwynne
2023-08-07add a struct sadb_x_iface message for interface SAsDavid Gwynne
2023-08-07add sec(4) to support route based ipsec vpns.David Gwynne
2023-08-03Move solock() down to sosetopt(). A part of standalone sblock() work.Vitaliy Makkoveev
2023-07-31don't let pfsync send an insert message for a state pfsync just insertedDavid Gwynne