summaryrefslogtreecommitdiff
path: root/sys/netinet/ipsec_input.c
AgeCommit message (Expand)Author
2018-11-09Remove the last few XXX rdomain markers. Even those functions respect theClaudio Jeker
2018-09-14Initialize the TDB to NULL in ipsec_common_input() andRicardo Mestre
2018-08-28Add per-TDB counters and a new SADB extension to export them toMartin Pieuchot
2018-07-11Convert AH & IPcomp to ipsec_input_cb() and count drops on input.Martin Pieuchot
2018-07-10Introduce new IPsec (per-CPU) statistics and refactor ESP inputMartin Pieuchot
2018-05-14When checking the IPsec enable sysctls, ipsec_common_input() hadAlexander Bluhm
2018-05-12Cleanup IPsec common input error handling with consistent goto drop.Alexander Bluhm
2017-11-20Sprinkle some NET_ASSERT_LOCKED(), const and co to prepare runningMartin Pieuchot
2017-11-14Introduce ipsec_sysctl() and move IPsec tunables where they belong.Martin Pieuchot
2017-11-08Make {ah,esp,ipcomp}stat use percpu counters.Visa Hankala
2017-11-06Use %s and __func__ in DPRINTF() to reduce false positive with grep(1).Martin Pieuchot
2017-10-09Reduces the scope of the NET_LOCK() in sysctl(2) path.Martin Pieuchot
2017-07-05The IP in IP input function strips the outer header and reinsertsAlexander Bluhm
2017-06-19When dealing with mbuf pointers passed down as function parameters,Alexander Bluhm
2017-05-28Rename ip_local() to ip_deliver() and give it the same parametersAlexander Bluhm
2017-05-22Move IPsec forward and local policy check functions to ipsec_input.cAlexander Bluhm
2017-05-16Replace remaining splsoftassert(IPL_SOFTNET) by NET_ASSERT_LOCKED().Martin Pieuchot
2017-05-12IPsec packets were passed through ip_input() a second time afterAlexander Bluhm
2017-05-12Instead of printing a debug message at the end of processing, panicAlexander Bluhm
2017-05-11IPv6 IPsec transport mode did not work if pf is enabled. TheAlexander Bluhm
2017-05-05Expand SA_LEN(), there is no benefit for using the macro in theAlexander Bluhm
2017-04-14Pass down the address family through the pr_input calls. ThisAlexander Bluhm
2017-04-06Replace bcopy with a simple assignment where both variables areDavid Hill
2017-02-28Some refactoring in ip6_input() needed to un-KERNEL_LOCK() the IPv6Martin Pieuchot
2017-02-08Remove the ipsec protocol callbacks which all do the same. ImplementAlexander Bluhm
2017-02-07Error propagation does neither make sense for ip input path nor forAlexander Bluhm
2017-02-05Use percpu counters for ip6statJeremie Courreges-Anglas
2017-01-29Change the IPv4 pr_input function to the way IPv6 is implemented,Alexander Bluhm
2017-01-26Reduce the difference between struct protosw and ip6protosw. TheAlexander Bluhm
2017-01-25Since raw_input() and route_input() are gone from pr_input, we canAlexander Bluhm
2017-01-23Assert for IPL_SOFTNET rather than raising SPL recursively.Martin Pieuchot
2017-01-20Kill recursive splsofnet()/splx() dances.Martin Pieuchot
2016-09-02Drop non-encapulated ESP packets using a UDP-encapsulating TDB, and addVincent Gross
2015-09-10It is time to put inet6 on a diet. Use the flensing knife and cut outClaudio Jeker
2015-09-09Kill a couple of if_get()s only needed to increment per-ifp IPv6 stats.Martin Pieuchot
2015-06-16Store a unique ID, an interface index, rather than a pointer to theMartin Pieuchot
2015-06-11Move away from using hzto(9); OK dlgMike Belopuhov
2015-05-13test mbuf pointers against NULL not 0Jonathan Gray
2015-04-17Stubs and support code for NIC-enabled IPsec bite the dust.Mike Belopuhov
2015-04-14make ipsp_address thread safe; ok mpiMike Belopuhov
2015-04-10replace the use of ifqueues for most input queues serviced by netisrDavid Gwynne
2015-03-26Remove bits of unfinished IPsec proxy support. DNS' KX records, anyone?Mike Belopuhov
2015-01-24Userland (base & ports) was adapted to always include <netinet/in.h>Theo de Raadt
2014-12-19unifdef INET in net code as a precursor to removing the pretend option.Ted Unangst
2014-12-05Explicitly include <net/if_var.h> instead of pulling it in <net/if.h>.Martin Pieuchot
2014-11-20Yet more #include de-duplication.Kenneth R Westerback
2014-07-22Fewer <netinet/in_systm.h> !Martin Pieuchot
2014-07-09bpf code surgery / shuffling / simplification.Henning Brauer
2014-04-14"struct pkthdr" holds a routing table ID, not a routing domain one.Martin Pieuchot
2014-01-09bzero/bcmp -> memset/memcmp. ok matthewTed Unangst