summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2023-09-29Make sure pfkeyv2_parsemessage() only returns 0 if the message wasTobias Heider
2023-09-29Only forward validated pfkey messages to promiscuous listeners.Tobias Heider
2023-09-26Have wg(4) copy the priority from the inner packet to the outer encryptedStuart Henderson
2023-09-24The stage queue should be freeed when wg_peer is destroyed.YASUOKA Masahiko
2023-09-16Allow counters_read(9) to take an optional scratch buffer.Martin Pieuchot
2023-09-08revert previousChristian Weisgerber
2023-09-07pf(4) ignores 'keep state' and 'nat-to' actions for unsolicitedAlexandr Nedvedicky
2023-08-18INITITIATION_COST -> INITIATION_COSTJonathan Gray
2023-08-18maximium -> maximumJonathan Gray
2023-08-18NBPFILTER not NBPFJonathan Gray
2023-08-15scrub the mbuf flowid for packets going out a sec interface.David Gwynne
2023-08-15sec_start needs to show bpf the packets going out.David Gwynne
2023-08-11better support queuing (hfsc) on sec(4)David Gwynne
2023-08-10Table persistent flag (PFR_TFLAG_PERSIST) won't get setAlexandr Nedvedicky
2023-08-09remove some uneeded includesJonathan Gray
2023-08-08if sec is being destroyed, prevent it from being brought up again.David Gwynne
2023-08-08try to avoid a deadlock between sec_down and sec_send.David Gwynne
2023-08-07add a struct sadb_x_iface message for interface SAsDavid Gwynne
2023-08-07add sec(4) to support route based ipsec vpns.David Gwynne
2023-08-03Move solock() down to sosetopt(). A part of standalone sblock() work.Vitaliy Makkoveev
2023-07-31don't let pfsync send an insert message for a state pfsync just insertedDavid Gwynne
2023-07-30count the number of times a ring was marked as oactive.David Gwynne
2023-07-28Compare m_pullup(9) return value against NULL instead of 0.Vitaliy Makkoveev
2023-07-27Fix routing message size check in route_output(). `rtm_hdrlen' type isVitaliy Makkoveev
2023-07-27Fix inline vlan-tag handling of forwarded LRO packets from ix(4)Jan Klemkow
2023-07-21Do not dump corrupted packets on loopback bpf.Alexander Bluhm
2023-07-18Enable LRO for TCP per default in the network drivers.Alexander Bluhm
2023-07-12Fix solock()/sounlock() usage.Vitaliy Makkoveev
2023-07-07Keep mbuf header field ph_mss during loopback TCP with LRO/TSO.Alexander Bluhm
2023-07-07Fix path MTU discovery for TCP LRO/TSO when forwarding.Alexander Bluhm
2023-07-06use refcnt API for multicast addresses, add tracepoint:refcnt:ethmulti probeKlemens Nanni
2023-07-06big update to pfsync to try and clean up locking in particular.David Gwynne
2023-07-04This diff limits the number of transactions/ticketsAlexandr Nedvedicky
2023-07-04Check for interface type ethernet before call ether_brport_isset()Jan Klemkow
2023-07-04The recent change to DIOCGETRULE allows applications whichAlexandr Nedvedicky
2023-07-04remove unused global varJonathan Gray
2023-07-03use consistent queue(9) example for LIST removal; OK bluhm mvsKlemens Nanni
2023-07-02Use TSO and LRO on the loopback interface to transfer TCP faster.Alexander Bluhm
2023-06-30Introduce M_PF type for pf(4) related memory allocations. Currently usedVitaliy Makkoveev
2023-06-28pfioctl() must make sure pfioctl_rw() gets unlocked before function returns.Alexandr Nedvedicky
2023-06-28Revert r1.406 "Close all pf transactions before opening a new one in DIOCGETR...Klemens Nanni
2023-06-28use refcnt API for multicast addresses, add tracepoint:refcnt:ifmaddr probeKlemens Nanni
2023-06-27Introduce M_IFGROUP type of memory allocation. M_TEMP is unreasonableVitaliy Makkoveev
2023-06-27Use shared net lock for DIOCGETIFACESKlemens Nanni
2023-06-27Remove net lock from DIOC{SET,CLR}IFFLAGKlemens Nanni
2023-06-26Revert unrelated change that sneaked into the pf_ioctl.c commit.Claudio Jeker
2023-06-26Close all pf transactions before opening a new one in DIOCGETRULES.Claudio Jeker
2023-06-12Move nd6_ifdetach() out of netlock. In this point, the interface isVitaliy Makkoveev
2023-06-05Do not calculate IP, TCP, UDP checksums on loopback interface.Alexander Bluhm
2023-06-05pfsync_update_state() is too paranoid about pf_state::pfsync_state.Alexandr Nedvedicky