summaryrefslogtreecommitdiff
path: root/sys/netinet/ipsec_input.c
AgeCommit message (Expand)Author
2017-02-28Some refactoring in ip6_input() needed to un-KERNEL_LOCK() the IPv6Martin Pieuchot
2017-02-08Remove the ipsec protocol callbacks which all do the same. ImplementAlexander Bluhm
2017-02-07Error propagation does neither make sense for ip input path nor forAlexander Bluhm
2017-02-05Use percpu counters for ip6statJeremie Courreges-Anglas
2017-01-29Change the IPv4 pr_input function to the way IPv6 is implemented,Alexander Bluhm
2017-01-26Reduce the difference between struct protosw and ip6protosw. TheAlexander Bluhm
2017-01-25Since raw_input() and route_input() are gone from pr_input, we canAlexander Bluhm
2017-01-23Assert for IPL_SOFTNET rather than raising SPL recursively.Martin Pieuchot
2017-01-20Kill recursive splsofnet()/splx() dances.Martin Pieuchot
2016-09-02Drop non-encapulated ESP packets using a UDP-encapsulating TDB, and addVincent Gross
2015-09-10It is time to put inet6 on a diet. Use the flensing knife and cut outClaudio Jeker
2015-09-09Kill a couple of if_get()s only needed to increment per-ifp IPv6 stats.Martin Pieuchot
2015-06-16Store a unique ID, an interface index, rather than a pointer to theMartin Pieuchot
2015-06-11Move away from using hzto(9); OK dlgMike Belopuhov
2015-05-13test mbuf pointers against NULL not 0Jonathan Gray
2015-04-17Stubs and support code for NIC-enabled IPsec bite the dust.Mike Belopuhov
2015-04-14make ipsp_address thread safe; ok mpiMike Belopuhov
2015-04-10replace the use of ifqueues for most input queues serviced by netisrDavid Gwynne
2015-03-26Remove bits of unfinished IPsec proxy support. DNS' KX records, anyone?Mike Belopuhov
2015-01-24Userland (base & ports) was adapted to always include <netinet/in.h>Theo de Raadt
2014-12-19unifdef INET in net code as a precursor to removing the pretend option.Ted Unangst
2014-12-05Explicitly include <net/if_var.h> instead of pulling it in <net/if.h>.Martin Pieuchot
2014-11-20Yet more #include de-duplication.Kenneth R Westerback
2014-07-22Fewer <netinet/in_systm.h> !Martin Pieuchot
2014-07-09bpf code surgery / shuffling / simplification.Henning Brauer
2014-04-14"struct pkthdr" holds a routing table ID, not a routing domain one.Martin Pieuchot
2014-01-09bzero/bcmp -> memset/memcmp. ok matthewTed Unangst
2013-11-11Replace most of our formating functions to convert IPv4/6 addresses fromMartin Pieuchot
2013-10-23Remove the number of in_var.h inclusions by moving some functions andMartin Pieuchot
2013-10-17The header file netinet/in_var.h included netinet6/in6_var.h. ThisAlexander Bluhm
2013-06-01Fix typo backswards -> backwards.Alexander Bluhm
2013-04-24Instead of having various extern declarations for protocol variables,Martin Pieuchot
2013-04-11Remove the extern keyword from function declarations, documentMartin Pieuchot
2013-04-10Remove various external variable declaration from sources files andMartin Pieuchot
2013-03-31Do not transfer diverted packets into IPsec processing. They shouldAlexander Bluhm
2013-03-28code that calls timeout functions should include timeout.hTed Unangst
2013-03-28no need for a lot of code to include proc.hTed Unangst
2012-09-26add M_ZEROIZE as an mbuf flag, so copied PFKEY messages (with embedded keys)Markus Friedl
2012-09-20spltdb() was really just #define'd to be splsoftnet(); replace the formerBret Lambert
2011-12-22Fix RFC reference sectionsperreault
2011-12-21Compute mandatory UDP checksum for IPv6 packetssperreault
2011-12-19Fix checksum of UDP/TCP packets following RFC 3948. This is required forYASUOKA Masahiko
2011-04-26In ipsec_common_input() the packet can be either IPv4 or IPv6. SoAlexander Bluhm
2011-04-06uncompress a packet with an IPcomp header only once; this preventsMarkus Friedl
2011-04-03don't rely on implict net/route.h inclusion via pf, claudio okHenning Brauer
2011-03-05The function pf_tag_packet() never fails. Remove a redundant checkAlexander Bluhm
2010-12-21don't leak short packets; ok mikeb@Markus Friedl
2010-07-09Add support for using IPsec in multiple rdomains.Reyk Floeter
2010-07-01Allow to specify an alternative enc(4) interface for an SA. AllReyk Floeter
2010-06-29Replace enc(4) with a new implementation as a cloner device. We stillReyk Floeter