summaryrefslogtreecommitdiff
path: root/sys/netinet/ip_ipcomp.c
AgeCommit message (Expand)Author
2021-12-23IPsec is not MP safe yet. To allow forwarding in parallel withoutAlexander Bluhm
2021-12-20Use per-CPU counters for tunnel descriptor block (TDB) statistics.Vitaliy Makkoveev
2021-12-11Protect the write access to the TDB flags field with a mutex perAlexander Bluhm
2021-11-21Add the new `ipsec_exctdb' ipsec(4) counter to count and expose to theVitaliy Makkoveev
2021-11-11Do not call ip_deliver() recursively from IPsec. As there is noAlexander Bluhm
2021-10-24Refactor ipcomp_input() and ipcomp_output(). Remove obsolete code relatedTobias Heider
2021-10-24There are more m_pullup() in IPsec input. Pass down the pointerAlexander Bluhm
2021-10-24Remove crp_etype and return errors directly from crypto_invoke()Tobias Heider
2021-10-24Pass the error of the IPsec callback to the caller. The droppedAlexander Bluhm
2021-10-23There is an m_pullup() down in AH input. As it may free or changeAlexander Bluhm
2021-10-23Fix use-after-free in ipcomp_output() introduced by previous commit.Alexander Bluhm
2021-10-23Retire asynchronous crypto API as it is no longer required by any driver andTobias Heider
2021-10-22Make error handling in IPsec consistent. Pass errors to the callers.Alexander Bluhm
2021-10-22After deleting hifn(4) the only provider for the LZS compressionAlexander Bluhm
2021-10-21Remove code to run crypto operations in a task queue. The code wasTobias Heider
2021-10-13The function crypto_dispatch() never returns an error. Make itAlexander Bluhm
2021-10-13The function ipip_output() was registered as .xf_output() xformAlexander Bluhm
2021-07-27Revert "Use per-CPU counters for tunnel descriptor block" diff.mvs
2021-07-26Use per-CPU counters for tunnel descriptor block (tdb) statistics.mvs
2021-07-26Do not queue crypto operations for IPsec. The packet entries inAlexander Bluhm
2021-07-08The xformsw array never changes. Declare struct xformsw constantAlexander Bluhm
2021-07-08Debug printfs in encdebug were inconsistent, some missing newlinesAlexander Bluhm
2021-07-08The properties of the crypto algorithms never change. Declare themAlexander Bluhm
2021-06-18The crypto(9) framework used by IPsec runs on a kernel task thatAlexander Bluhm
2019-09-30remove the "copy function" argument to bpf_mtap_hdr.David Gwynne
2018-09-13Include the size of IPCOMP header when checking for compression.Martin Pieuchot
2018-08-28Add per-TDB counters and a new SADB extension to export them toMartin Pieuchot
2018-07-16Fix for uninitialized variables.Martin Pieuchot
2018-07-12Introduce ipsec_output_cb() to merge duplicate code and account forMartin Pieuchot
2018-07-11Convert AH & IPcomp to ipsec_input_cb() and count drops on input.Martin Pieuchot
2018-05-12Cleanup IPsec IPComp error handling with consistent goto drop.Alexander Bluhm
2018-05-02Do not assume that mbufs within a chain do not have M_PKTHDR set.Alexander Bluhm
2017-11-08Make {ah,esp,ipcomp}stat use percpu counters.Visa Hankala
2017-11-06Use %s and __func__ in DPRINTF() to reduce false positive with grep(1).Martin Pieuchot
2017-08-11Remove NET_LOCK()'s argument.Martin Pieuchot
2017-04-05Replace 2 bcopy()'s with a simple assignment as both variables areDavid Hill
2017-02-17Using ipcomp(4) with IPv6 transport mode failed with protocol familyAlexander Bluhm
2017-02-09Put back a return that I have removed by accident.Alexander Bluhm
2017-02-07IPsec packets could be dropped unaccounted if output after cryptoAlexander Bluhm
2017-02-07Reduce the per-packet allocation costs for crypto operations (cryptop)Patrick Wildt
2017-02-07The return code of crp_callback is never checked, so it is notAlexander Bluhm
2017-01-09Grab the NET_LOCK() in ipcomp input callback.Visa Hankala
2016-12-24Grab the NET_LOCK() before calling ipsp_process_done() as it ends upMartin Pieuchot
2016-09-24ANSIfy netinet/; from David HillChristian Weisgerber
2016-09-13avoid extensive mbuf allocation for IPsec by replacing m_inject(4)Markus Friedl
2016-08-18fix panics caused by replacing m_copym2 with m_dup_pkt.David Gwynne
2016-08-15replace the last uses of m_copym2 with m_dup_pkt.David Gwynne
2015-07-15m_freem() can handle NULL, do not check for this condition beforehands.Theo de Raadt
2015-06-15Use proper argument type for crp_callback functions; no functional change.Mike Belopuhov
2015-04-17Stubs and support code for NIC-enabled IPsec bite the dust.Mike Belopuhov
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-29 06:06:39 +0000