summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Collapse)Author
2004-06-12support IPV6_USE_MIN_MTU (forgot to commit the file, sorry). noted by AnilJun-ichiro itojun Hagino
2004-06-10zero the cif struct correctly.Ryan Thomas McBride
2004-06-10Plug a memory leak in carp_clone_destroy()Ryan Thomas McBride
From Patrick Latifi
2004-06-08factor out md5 code; ok+tests henning@, djm@, hshoexer@Markus Friedl
2004-06-06extend routing table to be able to match and route packets based onCedric Berger
their *source* IP address in addition to their destination address. routing table "destination" now contains a "struct sockaddr_rtin" for IPv4 instead of a "struct sockaddr_in". the routing socket has been extended in a backward-compatible way. todo: PMTU enhancements, IPv6. ok deraadt@ mcbride@
2004-06-05set m_pkthdr.len early; ok mcbride, deraadtMarkus Friedl
2004-05-31initialize struct carp_if and let vhif_nvrs counter work. ok mcbride@Marco Pfatschbacher
2004-05-31work around an LP64 problem where we report an excessively large windowBrad Smith
due to incorrect mixing of types. From NetBSD ok cedric@ markus@
2004-05-31simplify; ok henning, itojunMarkus Friedl
2004-05-31clean some copy&paste leftovers from KAME code.Marco Pfatschbacher
ok markus, itojun.
2004-05-30compile without INET6; ok mcbridePeter Valchev
2004-05-29Remove multicast addresses and promiscuous mode when destroying theRyan Thomas McBride
carp interface.
2004-05-29carp_ioctl() happens after ifioctl(); check flags correctly so thatRyan Thomas McBride
'ifconfig carp0 down' and 'ifconfig carp0 up' work as expected.
2004-05-27the tcp header might be in a different mbuf after pulldown();Markus Friedl
fixes tcp corruption on rl(4); ok itojun, cedric
2004-05-26use sa_family not inp; netbsd merge error; ok dhartmeiMarkus Friedl
2004-05-25let sc_counter wrap automatically, ok mcbride@Jolan Luff
2004-05-24Check for sc->sc_ifp != NULL in carp_setroute(). Running dhclient on theRyan Thomas McBride
carp interface won't work, but it doesn't mean we should panic the box!
2004-05-23missing splx; andrushock@korovino.netTheo de Raadt
2004-05-21use 'mss' as lower limit, since 'ifp' might not be set; ok dhartmei@, henning@Markus Friedl
report and test by mpf@
2004-05-18if_ether.hBrad Smith
add ETHER_MAX_LEN_JUMBO, ETHER_VLAN_ENCAP_LEN, ETHER_ALIGN, and ETHERMTU_JUMBO constants. if.h add a few more interface capabilities flags. Some from NetBSD, some from FreeBSD. ok markus@
2004-05-18fix size argument to ovbcopy() in ip_pcbopts(), found by Andrei IltchenkoDaniel Hartmeier
(FreeBSD PR 66386), ok markus@, otto@
2004-05-16When we back off due to problems with the physical interface, advertiseRyan Thomas McBride
the backoff immediately on all of the interfaces instead of waiting for the next scheduled advertisement.
2004-05-16Remove useless test pointed out by Frank Denis <j@pureftpd.org>.Ryan Thomas McBride
2004-05-13Act like our advskew is 240 when receiving packets as well as sending ifRyan Thomas McBride
we're backing off. Makes the backoff actually work like it's supposed to instead of flip-flopping. Problem pointed out by ho@ and jakob@
2004-05-13Add cloned interface destruction to carp (ifconfig carp0 destroy).Ryan Thomas McBride
ok deraadt@
2004-05-13KNFRyan Thomas McBride
2004-05-10Make sure advskew set correctly in advertisement when configured to a valueRyan Thomas McBride
greater than 240. From Frank Denis <j@pureftpd.org>, PR3774.
2004-05-08If a carp interface has more than CARP_SENDAD_MAX_ERRORS failedRyan Thomas McBride
advertisements in a row, back off all the other interfaces, until CARP_SENDAD_MIN_SUCCESS advertisements are successful. This makes carp deal better with ip output errors.
2004-05-07Replace RSA-derived md5 code with code derived from Colin Plumb's PD version.Todd C. Miller
This moves md5.c out of libkern and into sys/crypto where it belongs (as requested by markus@). Note that md5.c is still mandatory (dev/rnd.c uses it). Verified with IPsec + hmac-md5 and tcp md5sig. OK henning@ and hshoexer@
2004-05-05Remove unused #define.Ryan Thomas McBride
2004-05-04The tcp specific routing metrics are almost never used so reduce the routingClaudio Jeker
table from these metrics. struct rt_msghdr used by the routing socket is not affected and so most userland apps don't need to be changed. some man page polishing by jmc@ OK henning@ markus@ theo@
2004-04-28make return-rst work on pure bridges. ok dhartmei@ henning@ mcbride@Cedric Berger
2004-04-28carp stats cleanup:Ryan Thomas McBride
- convert counters to 64 bits - remove junk from netstat ok pb@
2004-04-28Make carp(4) aware of its physical interface:Ryan Thomas McBride
- If the physical interface goes down or the link goes down, the carp interface goes down as well. - We treat this like the preemption holdoff with pfsync. So if one of the carp interfaces is known to be bad (because the physical interface it's associated with is bad), all the other carp interfaces back off: they won't preempt, and their advskew goes to 240. ok cedric@
2004-04-27Require NULL oldp when dropping a connection.Otto Moerbeek
ok markus@
2004-04-26change tcpdrop to require newp instead of oldp; suggested by ottoMarkus Friedl
2004-04-26- allow the user to force the TCP mss below the fail-safe 216 with a lowMike Frantzen
interface MTU. - break a tcp_output() -> tcp_mtudisc() -> tcp_output() infinite recursion when the TCP mss ends up larger than the interface MTU (when the if_mtu is smaller than the tcp header). connections will still stall feedback from itojun@, claudio@ and provos and testing from beck@
2004-04-26hide nonstandard struct from userlandJun-ichiro itojun Hagino
2004-04-26minor cleanupsTheo de Raadt
2004-04-25add TCPCTL_DROP; ok deraadt, cedric, grange, ...Markus Friedl
2004-04-25radix tree with multipath support. from kame. deraadt okJun-ichiro itojun Hagino
user visible changes: - you can add multiple routes with same key (route add A B then route add A C) - you have to specify gateway address if there are multiple entries on the table (route delete A B, instead of route delete A) kernel change: - radix_node_head has an extra entry - rnh_deladdr takes extra argument TODO: - actually take advantage of multipath (rtalloc -> rtalloc_mpath)
2004-04-20add tcps_rcvacktooold; ok deraadtMarkus Friedl
2004-04-18pass esp/ah/ipcmp to rawip if processing is disabled with sysctl;Markus Friedl
allows userland ipsec; tested by sturm@; ok deraadt@, ho@, hshoexer@
2004-04-15Unbreak INET6less kernels.Alexander Yurchenko
ok markus
2004-04-15allow TCP packet with IPv4 option (we have been dropping these).Jun-ichiro itojun Hagino
simplify some of the codepath by using IP6_EXTHDR_GET. markus ok
2004-04-14syn_cache_get: send RST instead of RST+ACK in response to ACK; ok deraadtMarkus Friedl
2004-04-14simpler ipsp_aux_match() API; ok henning, hshoexerMarkus Friedl
2004-04-14with IPv6, udp checksum is mandatory. henning okJun-ichiro itojun Hagino
2004-04-12remove duplicate if. from pedro martelletto, ok markus@Ted Unangst
2004-04-12factor out dropafterack_ratelim code, use ratelimitMarkus Friedl
for tcps_rcvacktoomuch, too; drop very old ACKs; ok deraadt@