summaryrefslogtreecommitdiff
path: root/sys/netinet/ipsec_input.c
AgeCommit message (Expand)Author
2017-07-05The IP in IP input function strips the outer header and reinsertsAlexander Bluhm
2017-06-19When dealing with mbuf pointers passed down as function parameters,Alexander Bluhm
2017-05-28Rename ip_local() to ip_deliver() and give it the same parametersAlexander Bluhm
2017-05-22Move IPsec forward and local policy check functions to ipsec_input.cAlexander Bluhm
2017-05-16Replace remaining splsoftassert(IPL_SOFTNET) by NET_ASSERT_LOCKED().Martin Pieuchot
2017-05-12IPsec packets were passed through ip_input() a second time afterAlexander Bluhm
2017-05-12Instead of printing a debug message at the end of processing, panicAlexander Bluhm
2017-05-11IPv6 IPsec transport mode did not work if pf is enabled. TheAlexander Bluhm
2017-05-05Expand SA_LEN(), there is no benefit for using the macro in theAlexander Bluhm
2017-04-14Pass down the address family through the pr_input calls. ThisAlexander Bluhm
2017-04-06Replace bcopy with a simple assignment where both variables areDavid Hill
2017-02-28Some refactoring in ip6_input() needed to un-KERNEL_LOCK() the IPv6Martin Pieuchot
2017-02-08Remove the ipsec protocol callbacks which all do the same. ImplementAlexander Bluhm
2017-02-07Error propagation does neither make sense for ip input path nor forAlexander Bluhm
2017-02-05Use percpu counters for ip6statJeremie Courreges-Anglas
2017-01-29Change the IPv4 pr_input function to the way IPv6 is implemented,Alexander Bluhm
2017-01-26Reduce the difference between struct protosw and ip6protosw. TheAlexander Bluhm
2017-01-25Since raw_input() and route_input() are gone from pr_input, we canAlexander Bluhm
2017-01-23Assert for IPL_SOFTNET rather than raising SPL recursively.Martin Pieuchot
2017-01-20Kill recursive splsofnet()/splx() dances.Martin Pieuchot
2016-09-02Drop non-encapulated ESP packets using a UDP-encapsulating TDB, and addVincent Gross
2015-09-10It is time to put inet6 on a diet. Use the flensing knife and cut outClaudio Jeker
2015-09-09Kill a couple of if_get()s only needed to increment per-ifp IPv6 stats.Martin Pieuchot
2015-06-16Store a unique ID, an interface index, rather than a pointer to theMartin Pieuchot
2015-06-11Move away from using hzto(9); OK dlgMike Belopuhov
2015-05-13test mbuf pointers against NULL not 0Jonathan Gray
2015-04-17Stubs and support code for NIC-enabled IPsec bite the dust.Mike Belopuhov
2015-04-14make ipsp_address thread safe; ok mpiMike Belopuhov
2015-04-10replace the use of ifqueues for most input queues serviced by netisrDavid Gwynne
2015-03-26Remove bits of unfinished IPsec proxy support. DNS' KX records, anyone?Mike Belopuhov
2015-01-24Userland (base & ports) was adapted to always include <netinet/in.h>Theo de Raadt
2014-12-19unifdef INET in net code as a precursor to removing the pretend option.Ted Unangst
2014-12-05Explicitly include <net/if_var.h> instead of pulling it in <net/if.h>.Martin Pieuchot
2014-11-20Yet more #include de-duplication.Kenneth R Westerback
2014-07-22Fewer <netinet/in_systm.h> !Martin Pieuchot
2014-07-09bpf code surgery / shuffling / simplification.Henning Brauer
2014-04-14"struct pkthdr" holds a routing table ID, not a routing domain one.Martin Pieuchot
2014-01-09bzero/bcmp -> memset/memcmp. ok matthewTed Unangst
2013-11-11Replace most of our formating functions to convert IPv4/6 addresses fromMartin Pieuchot
2013-10-23Remove the number of in_var.h inclusions by moving some functions andMartin Pieuchot
2013-10-17The header file netinet/in_var.h included netinet6/in6_var.h. ThisAlexander Bluhm
2013-06-01Fix typo backswards -> backwards.Alexander Bluhm
2013-04-24Instead of having various extern declarations for protocol variables,Martin Pieuchot
2013-04-11Remove the extern keyword from function declarations, documentMartin Pieuchot
2013-04-10Remove various external variable declaration from sources files andMartin Pieuchot
2013-03-31Do not transfer diverted packets into IPsec processing. They shouldAlexander Bluhm
2013-03-28code that calls timeout functions should include timeout.hTed Unangst
2013-03-28no need for a lot of code to include proc.hTed Unangst
2012-09-26add M_ZEROIZE as an mbuf flag, so copied PFKEY messages (with embedded keys)Markus Friedl
2012-09-20spltdb() was really just #define'd to be splsoftnet(); replace the formerBret Lambert