| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2004-05-04 | The tcp specific routing metrics are almost never used so reduce the routing | Claudio Jeker | |
| table from these metrics. struct rt_msghdr used by the routing socket is not affected and so most userland apps don't need to be changed. some man page polishing by jmc@ OK henning@ markus@ theo@ | |||
| 2004-04-28 | make return-rst work on pure bridges. ok dhartmei@ henning@ mcbride@ | Cedric Berger | |
| 2004-04-28 | carp stats cleanup: | Ryan Thomas McBride | |
| - convert counters to 64 bits - remove junk from netstat ok pb@ | |||
| 2004-04-28 | Make carp(4) aware of its physical interface: | Ryan Thomas McBride | |
| - If the physical interface goes down or the link goes down, the carp interface goes down as well. - We treat this like the preemption holdoff with pfsync. So if one of the carp interfaces is known to be bad (because the physical interface it's associated with is bad), all the other carp interfaces back off: they won't preempt, and their advskew goes to 240. ok cedric@ | |||
| 2004-04-27 | Require NULL oldp when dropping a connection. | Otto Moerbeek | |
| ok markus@ | |||
| 2004-04-26 | change tcpdrop to require newp instead of oldp; suggested by otto | Markus Friedl | |
| 2004-04-26 | - allow the user to force the TCP mss below the fail-safe 216 with a low | Mike Frantzen | |
| interface MTU. - break a tcp_output() -> tcp_mtudisc() -> tcp_output() infinite recursion when the TCP mss ends up larger than the interface MTU (when the if_mtu is smaller than the tcp header). connections will still stall feedback from itojun@, claudio@ and provos and testing from beck@ | |||
| 2004-04-26 | hide nonstandard struct from userland | Jun-ichiro itojun Hagino | |
| 2004-04-26 | minor cleanups | Theo de Raadt | |
| 2004-04-25 | add TCPCTL_DROP; ok deraadt, cedric, grange, ... | Markus Friedl | |
| 2004-04-25 | radix tree with multipath support. from kame. deraadt ok | Jun-ichiro itojun Hagino | |
| user visible changes: - you can add multiple routes with same key (route add A B then route add A C) - you have to specify gateway address if there are multiple entries on the table (route delete A B, instead of route delete A) kernel change: - radix_node_head has an extra entry - rnh_deladdr takes extra argument TODO: - actually take advantage of multipath (rtalloc -> rtalloc_mpath) | |||
| 2004-04-20 | add tcps_rcvacktooold; ok deraadt | Markus Friedl | |
| 2004-04-18 | pass esp/ah/ipcmp to rawip if processing is disabled with sysctl; | Markus Friedl | |
| allows userland ipsec; tested by sturm@; ok deraadt@, ho@, hshoexer@ | |||
| 2004-04-15 | Unbreak INET6less kernels. | Alexander Yurchenko | |
| ok markus | |||
| 2004-04-15 | allow TCP packet with IPv4 option (we have been dropping these). | Jun-ichiro itojun Hagino | |
| simplify some of the codepath by using IP6_EXTHDR_GET. markus ok | |||
| 2004-04-14 | syn_cache_get: send RST instead of RST+ACK in response to ACK; ok deraadt | Markus Friedl | |
| 2004-04-14 | simpler ipsp_aux_match() API; ok henning, hshoexer | Markus Friedl | |
| 2004-04-14 | with IPv6, udp checksum is mandatory. henning ok | Jun-ichiro itojun Hagino | |
| 2004-04-12 | remove duplicate if. from pedro martelletto, ok markus@ | Ted Unangst | |
| 2004-04-12 | factor out dropafterack_ratelim code, use ratelimit | Markus Friedl | |
| for tcps_rcvacktoomuch, too; drop very old ACKs; ok deraadt@ | |||
| 2004-04-04 | on in-window SYN, send back rate-limited ACK; ok dhartmei frantzen markus | Theo de Raadt | |
| 2004-03-31 | in gettdbbysrcdst(), allow matching with either src or dst beeing a wildcard | Henning Brauer | |
| (emtpy) entry ok markus@ | |||
| 2004-03-28 | memory leak fix; from pat, via tedu, ok dhartmei | Theo de Raadt | |
| 2004-03-26 | don't use mbuf after free; ok mcbride, deraadt, cloder | Markus Friedl | |
| 2004-03-26 | Also raise advskew to 240 while we wait for pfsync to get it's bulk update. | Ryan Thomas McBride | |
| This is to deal with situations where the network is not working during boot so we become master by default - the high advskew value allows other carp boxes to preempt us when the network finally comes up. ok deraadt@ beck@ | |||
| 2004-03-24 | Correct size in error message. From mickey@ | Ryan Thomas McBride | |
| ok deraadt@ | |||
| 2004-03-24 | Disable net.inet.carp.log by default. | Ryan Thomas McBride | |
| ok deraadt@ | |||
| 2004-03-22 | Support for best effort bulk transfers of states when pfsync syncif is | Ryan Thomas McBride | |
| configured. This this allows pfsync+carp clusters to come up gracefully without killing active connections. pfsync now prevents carp from preempting to become master until the state table has sync'd. ABI change, any application which use struct pf_state must be recompiled. Reminded about this by Christian Gut. Thanks to beck@ cedric@ and dhartmei@ for testing and comments. ok deraadt@ | |||
| 2004-03-22 | spelling; jjy2+@pitt.edu | Theo de Raadt | |
| 2004-03-21 | fix udp checksum verification if ip options are present; | Markus Friedl | |
| report from Pyun via dhartmei@; ok mcbride@, dhartmei@ | |||
| 2004-03-20 | Unbreak routing change handling for state changes; count addresses differently | Ryan Thomas McBride | |
| depending on where we're calling carp_addrcount() from. | |||
| 2004-03-18 | Allow the state to be changed explicitly via the ioctl. | Ryan Thomas McBride | |
| ok markus@ | |||
| 2004-03-17 | typo in comment (fragment->segment); ok itojun@ | Markus Friedl | |
| 2004-03-15 | strncpy -> strlcpy. ok markus@ "(this is even unused crap, i think)" | Ted Unangst | |
| from Patrick Latifi | |||
| 2004-03-12 | Fix rtentry leak in in_losing(). The rtentry needs to be freed in anycase. | Claudio Jeker | |
| Found by Greg Wooledge. A lot of debugging and help by dhartmei@ markus@ cedric@. OK dhartmei@ markus@ deraadt@ | |||
| 2004-03-10 | Don't permit a negative index. Pointed out by Patrick Latifi. | Ryan Thomas McBride | |
| 2004-03-05 | Only send route add or delete messages if it's the first identical | Ryan Thomas McBride | |
| address being added or the last identical address being removed, respectively. Part of a larger diff approved by markus@ and dhartmei@, API changes held back for now. | |||
| 2004-03-02 | limit total number of queued out-of-order packets to NMBCLUSTERS/2; ok mcbride | Markus Friedl | |
| 2004-02-27 | implement tcp_drain() similar to ip_drain(); ok mcbride@ | Markus Friedl | |
| 2004-02-27 | API change; counter for upcoming tcp_drain(); ok deraadt | Markus Friedl | |
| 2004-02-17 | switch to sysctl_int_arr(); ok henning, deraadt | Markus Friedl | |
| 2004-02-16 | don't allocate a cluster if the header fits into a mbuf; | Markus Friedl | |
| ok itojun@, henning@, mcbride@ | |||
| 2004-02-15 | check TDBF_INVALID for TCP MD5 SA lookups; ok mcbride, henning | Markus Friedl | |
| 2004-02-15 | switch to sysctl_int_arr(); ok itojun, henning, miod, deraadt | Markus Friedl | |
| 2004-02-13 | typo, lenght -> length | Brad Smith | |
| 2004-02-11 | make mss signed; avoids large mss if ifp==NULL; ok itojun@ | Markus Friedl | |
| 2004-02-10 | plug mbuf leak (ip_fragment() always free mbuf on error). tested by cedric, | Jun-ichiro itojun Hagino | |
| dhartmei ok | |||
| 2004-02-10 | check TF_SIGNATURE when calculating the mss; add TCPOLEN_SIGLEN and | Markus Friedl | |
| avoid magic constants; ok henning@ | |||
| 2004-02-05 | take RFC2460 section 5 last paragraph into consideration when we compute MSS | Jun-ichiro itojun Hagino | |
| (if path MTU < 1280, use 1280 as packet size and attach fragment header). markus ok | |||
| 2004-01-31 | rename tcp sockopt TCP_SIGNATURE_ENABLE to TCP_MD5SIG | Henning Brauer | |
| requested by theo ok markus@ hshoexer@ | |||
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |