summaryrefslogtreecommitdiff
path: root/sys/netinet/ip_ipsp.h
AgeCommit message (Expand)Author
2023-11-26Remove inp parameter from ip_output().Alexander Bluhm
2023-10-11Prevent deref-after-free when tdb_timeout() fires on invalid new tdb.Tobias Heider
2023-08-07start adding support for route-based ipsec vpns.David Gwynne
2023-07-06big update to pfsync to try and clean up locking in particular.David Gwynne
2022-07-14Use capital letters for global ipsec(4) locks description. Use 'D'Vitaliy Makkoveev
2022-04-30When performing ipsp_ids_free(), grab `ipsec_flows_mtx' mutex(9) before doVitaliy Makkoveev
2022-04-21Introduce a dedicated link entries for snapshots in pfsync(4). The purposeAlexandr Nedvedicky
2022-03-13Hrvoje has hit a crash with IPsec acquire while testing the parallelAlexander Bluhm
2022-03-08In IPsec policy replace integer refcount with atomic refcount.Alexander Bluhm
2022-03-02Merge two comments describing the locks into one.Alexander Bluhm
2022-01-04Add `ipsec_flows_mtx' mutex(9) to protect `ipsp_ids_*' list andYASUOKA Masahiko
2021-12-20Use per-CPU counters for tunnel descriptor block (TDB) statistics.Vitaliy Makkoveev
2021-12-19There are occasions where the walker function in tdb_walk() mightAlexander Bluhm
2021-12-14To cache lookups, the policy ipo is linked to its SA tdb. ThereAlexander Bluhm
2021-12-11Protect the write access to the TDB flags field with a mutex perAlexander Bluhm
2021-12-08Start documenting the locking strategy of struct tdb fields. NoteAlexander Bluhm
2021-12-07In ipo_tdb the flow contains a reference counted TDB cache. ThisAlexander Bluhm
2021-12-03Add tdb_delete_locked() to replace duplicate tdb deletion code inTobias Heider
2021-12-01Reintroduce the TDBF_DELETED flag. Checking next pointer to figureAlexander Bluhm
2021-12-01Let ipsp_spd_lookup() return an error instead of a TDB. The TDBAlexander Bluhm
2021-11-30Remove unused parameter from ipsp_spd_inp().Alexander Bluhm
2021-11-26Replace TDBF_DELETED flag with check if tdb was already unlinked.Tobias Heider
2021-11-25Implement reference counting for IPsec tdbs. Not all cases areAlexander Bluhm
2021-11-21Add the new `ipsec_exctdb' ipsec(4) counter to count and expose to theVitaliy Makkoveev
2021-11-16To debug IPsec and tdb refcounting it is useful to have "show tdb"Alexander Bluhm
2021-10-25Call a locked variant of tdb_unlink() from tdb_walk(). Fixes aAlexander Bluhm
2021-10-24Merge esp_input_cb() intp esp_input().Tobias Heider
2021-10-24Remove code duplication by merging the v4 and v6 input functionsAlexander Bluhm
2021-10-24Refactor ah_input() and ah_output() for new crypto API.Tobias Heider
2021-10-24Refactor ipcomp_input() and ipcomp_output(). Remove obsolete code relatedTobias Heider
2021-10-24There are more m_pullup() in IPsec input. Pass down the pointerAlexander Bluhm
2021-10-24Remove 'struct tdb_crypto' allocations from esp_input() and esp_output().Tobias Heider
2021-10-23There is an m_pullup() down in AH input. As it may free or changeAlexander Bluhm
2021-10-23Retire asynchronous crypto API as it is no longer required by any driver andTobias Heider
2021-10-13The function ipip_output() was registered as .xf_output() xformAlexander Bluhm
2021-10-05Cleanup the error handling in ipsec ipip_output() and consistentlyAlexander Bluhm
2021-10-05Move setting ipsec mtu into a function. The NULL and invalid checkAlexander Bluhm
2021-09-29Global variables to track initialisation behave poorly with MP.Alexander Bluhm
2021-08-10Remove unused `ipa_pcb' from 'ipsec_acquire' structure.mvs
2021-07-27Revert "Use per-CPU counters for tunnel descriptor block" diff.mvs
2021-07-26Use per-CPU counters for tunnel descriptor block (tdb) statistics.mvs
2021-07-18Introduce and use garbage collector for 'ipsec_ids' struct entitiesmvs
2021-07-18The IPsec authentication before decryption used a different replayAlexander Bluhm
2021-07-13Remove unused `PolicyHead' from 'sockaddr_encap' structure.mvs
2021-07-08The xformsw array never changes. Declare struct xformsw constantAlexander Bluhm
2021-07-08The properties of the crypto algorithms never change. Declare themAlexander Bluhm
2021-07-07Fix whitespaces in IPsec code.Alexander Bluhm
2021-05-04Initialize `ipsec_policy_pool' within pfkey_init() instead of doing thatmvs
2020-11-05Enable support for ASN1_DN ipsec identifiers.Peter Hessler
2020-09-01Convert *_sysctl in ipsec_input.c to sysctl_bounded_arrgnezdo
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-02 21:27:33 +0000