summaryrefslogtreecommitdiff
path: root/sys/netinet6/ip6_output.c
AgeCommit message (Collapse)Author
2008-09-03Remove dead code: ip6_copypktopts() is not used anywhere.Marco Pfatschbacher
OK deraadt@, henning@
2008-08-08Do not latch the IPSec tdb to the inpcb unconditionally. This hasAlexander Bluhm
been moved to the protocol layer from ip_output at 2002/05/31. The IPv6 part has been forgotten so packets could get encrypted unintentionally. ok hshoexer markus
2008-07-30Call ip6_clearpktopts() on error in copypktopts() instead of freeingCan Erkin Acar
every field individually. ok claudio@ markus@ henning@ deraadt@
2008-06-11ANSIfy to sync with KAME. From Karl Sjodahl <dunceor@gmail.com>.Ryan Thomas McBride
ok todd deraadt naddy bluhm
2008-06-09Introduce a facility to generate unpredictable 32 bit numbers withDamien Miller
near maximal (2^32) cycle times. These are useful for network IDs in cases where there are negative consequences to ID prediction and/or reuse. Use the idgen32() functions to generate IPv6 IDs and NFS client/server XIDs. Pseudorandom permutation code in crypto/idgen.c based on public domain skip32.c from Greg Rose. feedback & ok thib@ deraadt@
2008-03-31strictly interpret msg_controllen to be the exact total length of theTheo de Raadt
cmsg's, including alignments, ie. the sum of CMSG_SPACE()'s. any other interpretation would be in violation of various unix specifications. RFC3542 section 20.2 is totally and completely wrong -- it is not allowed to over-ride the specification of msg_controllen, since the intent is that one could mix-and-match various types of cmsg's and an exact match is therefore required. ok kettenis, tested by many
2007-06-01apply the "skip ipsec if there are no flows" speedup diff to IPv6 too.Henning Brauer
we need a pointer to the inpcb to decide, which was not previously passed to ip6_output, so this diff is a little bigger. from itojun, ok ryan
2007-02-08- AH: when computing crypto checksum for output, massage source-routingJun-ichiro itojun Hagino
header. - ipsec_input: fix mistake in IPv6 next-header chasing. - ipsec_output: look for the position to insert AH more carefully. - ip6_output: enable use of AH with extension headers. avoid tunnellinng when source-routing header is present. ok by deraad, naddy, hshoexer
2006-12-10In ip6_output(), make sure ia is initialized before it is used.Miod Vallat
2006-12-09switch IPv6 advanced API from RFC2292 to RFC3542 (2292 is superseded by 3542).Jun-ichiro itojun Hagino
the kernel still handles RFC2292 set/getsockopts, so that compiled binary has no trouble running. userland sees RFC3542 symbols only on header file so new code has to use RFC3542 API. bump libc shlib minor for function additions. tested on i386/amd64 by jmc, i386 by brad. checked by deraadt.
2006-12-08leftover from interface-local multicast change.Jun-ichiro itojun Hagino
2006-11-17change semantics of ff01::/16 to interface local multicastJun-ichiro itojun Hagino
(to sync up with more recent IPv6 spec) ok from: deraadt mcbride
2006-06-18Add support for equal-cost multipath IP.Christopher Pascoe
To minimise path disruptions, this implements recommendations made in RFC2992 - the hash-threshold mechanism to select paths based on source/destination IP address pairs, and inserts multipath routes in the middle of the route table. To enable multipath distribution, use: sysctl net.inet.ip.multipath=1 and/or: sysctl net.inet6.ip6.multipath=1 testing norby@ ok claudio@ henning@ hshoexer@
2006-06-16adjust functions dealing with the routing table to take a table ID asHenning Brauer
parameter so they can work on alternate tables. table 0 hardcoded for many callers yet, that will be adapted step by step. input + ok claudio norby hshoexer
2006-06-16More spelling fixes.Christopher Pascoe
2006-06-16Spelling.Christopher Pascoe
2006-05-27Do the same thing as for IPv4. Use a sysctl to enable/disable mfrowardingClaudio Jeker
and additionaly make the code part of the MROUTING option. Put it in deraadt@
2006-03-05Use more queue macros rather than doing it by hand; ok otto@ krw@Miod Vallat
2005-01-11correctly deal with unspecified (zero) interface number in IPV6_MULTICAST_IF,Damien Miller
IPV6_{JOIN,LEAVE}_GROUP ioctls; ok itojun@
2004-06-21Get rid of pf_test_eh() wrapper.Ryan Thomas McBride
ok cedric@ henning@
2004-06-12support IPV6_USE_MIN_MTU, to make BIND9 better.Jun-ichiro itojun Hagino
(sorry about the mess yesterday)
2004-06-11back out tree breakage. Like, come onTheo de Raadt
2004-06-11support IPV6_USE_MIN_MTU, which is needed to run BIND9 well. from kameJun-ichiro itojun Hagino
markus ok
2004-02-04strictly follow RFC2460 section 5, last paragraph (sender behavior whenJun-ichiro itojun Hagino
path MTU < 1280). bug found by Georgi Guninski. ok dhartmei
2004-02-02make the stack compile if NPF=0. ok deraadt@ markus@Cedric Berger
2003-12-10use if_indexlim (instead of if_index) and ifindex2ifnet[x] != NULLJun-ichiro itojun Hagino
to check if interface exists, as (1) if_index will have different meaning (2) ifindex2ifnet could become NULL when interface gets destroyed, when we introduce dynamically-created interfaces. markus ok
2003-11-07fix behavior when ipv6mr_interface is 0. reported on netbsd listJun-ichiro itojun Hagino
2003-10-01use random number generator to generate IPv6 fragment ID/flowlabel.Jun-ichiro itojun Hagino
cleanup IPv6 flowlabel handling. deraadt ok
2003-10-01correct m_cat misuse. i remember it was ok'ed by someone but don't remember ↵Jun-ichiro itojun Hagino
who...
2003-08-15change arguments to suser. suser now takes the process, and a flagsTed Unangst
argument. old cred only calls user suser_ucred. this will allow future work to more flexibly implement the idea of a root process. looks like something i saw in freebsd, but a little different. use of suser_ucred vs suser in file system code should be looked at again, for the moment semantics remain unchanged. review and input from art@ testing and further review miod@
2003-06-11- sync up MLD declaration with RFC3542 (s/MLD6/MLD/)Jun-ichiro itojun Hagino
- routing header declaration with RFC3542 (note: sizeof(ip6_rthdr0) has changed!) also, sync up with RFC2460 routing header definition (no "strict" source routing mode any more) part of advanced API update (RFC2292 -> 3542). markus, todd, millert, henning ok
2003-06-02Remove the advertising clause in the UCB license which BerkeleyTodd C. Miller
rescinded 22 July 1999. Proofed by myself and Theo.
2002-10-31plug memory leak. from sam leffler. sync w/kameJun-ichiro itojun Hagino
2002-09-23correct length of PADN option before jumbo payload option. sync w/kameJun-ichiro itojun Hagino
deraadt ok
2002-09-11fix pointer signedness mixup. sync w/kameJun-ichiro itojun Hagino
2002-09-11KNF - return is not a function. sync w/kameJun-ichiro itojun Hagino
2002-06-09whitespace cleanupJun-ichiro itojun Hagino
2002-06-08use splnet for ipsecJun-ichiro itojun Hagino
2002-06-08splnet -> splsoftnet where appropriateJun-ichiro itojun Hagino
2002-06-08sync with latest KAME in6_ifaddr/prefix/default router manipulation.Jun-ichiro itojun Hagino
behavior changes: - two iocts used by ndp(8) are now obsolete (backward compat provided). use sysctl path instead. - lo0 does not get ::1 automatically. it will get ::1 when lo0 comes up.
2002-06-07move IPV6_CHECKSUM processing to ip6_raw_ctloutput(). bunch of KNFs.Jun-ichiro itojun Hagino
rip6 stats. sync w/kame
2002-06-07just for consistency/compatibility, have net.inet6.ip6.v6only sysctl MIB,Jun-ichiro itojun Hagino
as well as set/getsockopt(IPV6_V6ONLY).
2002-06-07styleJun-ichiro itojun Hagino
2002-06-07'fall through' is not a valid LINT keyword.Jun-ichiro itojun Hagino
2002-05-31do not try to update rmx_mtu if rmx_mtu == 0 (obey ifmtu)Jun-ichiro itojun Hagino
2002-05-29force fragment to minimum link MTU (1280) when needed (when PMTUD doesJun-ichiro itojun Hagino
not take effect) - like icmp6 responses or foo-over-IPv6 tunnel.
2002-05-29attach nd_ifinfo structure to if_afdata.Jun-ichiro itojun Hagino
split IPv6 MTU (advertised by RA) from real link MTU. sync with kame
2002-03-14First round of __P removal in sysTodd C. Miller
2002-01-21remove couple of #if 0'ed portion we will never useJun-ichiro itojun Hagino
2001-12-07whitespace/comment sync with kameJun-ichiro itojun Hagino
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-30 02:41:38 +0000