summaryrefslogtreecommitdiff
path: root/sys/netinet/ipsec_output.c
AgeCommit message (Expand)Author
2024-02-11Remove include netinet6/ip6_var.h from netinet/in_pcb.h.Alexander Bluhm
2022-01-02spellingJonathan Gray
2021-12-23IPsec is not MP safe yet. To allow forwarding in parallel withoutAlexander Bluhm
2021-12-20Use per-CPU counters for tunnel descriptor block (TDB) statistics.Vitaliy Makkoveev
2021-12-11Protect the write access to the TDB flags field with a mutex perAlexander Bluhm
2021-12-02Allow to build kernel without IPSEC or INET6 defines.Alexander Bluhm
2021-11-25Implement reference counting for IPsec tdbs. Not all cases areAlexander Bluhm
2021-10-23Retire asynchronous crypto API as it is no longer required by any driver andTobias Heider
2021-10-22Make error handling in IPsec consistent. Pass errors to the callers.Alexander Bluhm
2021-10-13The function crypto_dispatch() never returns an error. Make itAlexander Bluhm
2021-10-13The function ipip_output() was registered as .xf_output() xformAlexander Bluhm
2021-10-05Cleanup the error handling in ipsec ipip_output() and consistentlyAlexander Bluhm
2021-07-27Revert "Use per-CPU counters for tunnel descriptor block" diff.mvs
2021-07-26Use per-CPU counters for tunnel descriptor block (tdb) statistics.mvs
2021-07-26Do not queue crypto operations for IPsec. The packet entries inAlexander Bluhm
2021-07-21Propagate errors from crypto_invoke() and count them in IPsec. TheyAlexander Bluhm
2021-07-08Debug printfs in encdebug were inconsistent, some missing newlinesAlexander Bluhm
2021-07-07Fix whitespaces in IPsec code.Alexander Bluhm
2021-06-18The crypto(9) framework used by IPsec runs on a kernel task thatAlexander Bluhm
2021-03-10spellingJonathan Gray
2020-09-22whitespacetobhe
2020-06-24kernel: use gettime(9)/getuptime(9) in lieu of time_second(9)/time_uptime(9)cheloha
2020-04-23Add support for autmatically moving traffic between rdomains on ipsec(4)tobhe
2018-09-14Initialize the TDB to NULL in ipsec_common_input() andRicardo Mestre
2018-08-28Add per-TDB counters and a new SADB extension to export them toMartin Pieuchot
2018-07-12Introduce ipsec_output_cb() to merge duplicate code and account forMartin Pieuchot
2018-06-04Cleanup IPsec output error handling with consistent goto drop.Alexander Bluhm
2018-05-14When walking the IPv6 header chain in IPsec output, check that theAlexander Bluhm
2017-11-08Make {ah,esp,ipcomp}stat use percpu counters.Visa Hankala
2017-11-06Use %s and __func__ in DPRINTF() to reduce false positive with grep(1).Martin Pieuchot
2017-05-18The function name ip4_input() is confusing as it also handles IPv6Alexander Bluhm
2017-05-16Replace remaining splsoftassert(IPL_SOFTNET) by NET_ASSERT_LOCKED().Martin Pieuchot
2017-04-06Replace bcopy with a simple assignment where both variables areDavid Hill
2017-01-20Kill recursive splsofnet()/splx() dances.Martin Pieuchot
2016-10-11Rename 'i' to 'hlen' for greater readability; ok millert, naddyMike Belopuhov
2016-09-13avoid extensive mbuf allocation for IPsec by replacing m_inject(4)Markus Friedl
2016-02-28When IPsec UDP encapsulation is used for IPv6, the stack shouldMike Belopuhov
2015-09-11Kill yet another argument to functions in IPv6. This time ip6_output'sClaudio Jeker
2015-07-15m_freem() can handle NULL, do not check for this condition beforehands.Theo de Raadt
2015-06-11Move away from using hzto(9); OK dlgMike Belopuhov
2015-04-17Stubs and support code for NIC-enabled IPsec bite the dust.Mike Belopuhov
2015-04-14make ipsp_address thread safe; ok mpiMike Belopuhov
2015-01-24Userland (base & ports) was adapted to always include <netinet/in.h>Theo de Raadt
2014-12-19unifdef INET in net code as a precursor to removing the pretend option.Ted Unangst
2014-09-08remove uneeded route.h includesJonathan Gray
2014-07-22Fewer <netinet/in_systm.h> !Martin Pieuchot
2014-04-21ip_output() using varargs always struck me as bizarre, esp since it's onlyHenning Brauer
2014-04-21we'll do fine without casting NULL to struct foo * / void *Henning Brauer
2013-10-24Remove the number of in6_var.h inclusions by moving some functions andMartin Pieuchot
2013-08-03unbreak PMTU-discovery for AES-GCM; ok mikeb@Markus Friedl