summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Collapse)Author
2003-11-16convert __attribute__((__packed__)) to __packed so that parsers unawareAnil Madhavapeddy
of gcc extensions have more of a chance. ok mcbride@, no objections from millert@, deraadt@
2003-11-16compile without INET6Markus Friedl
2003-11-14Don't include KAME link-local interface ID in HMAC.Ryan Thomas McBride
from itojun@
2003-11-09No need to pass an unused struct carp_softc * into carp_input_c() fromRyan Thomas McBride
carp_input() and carp6_input().
2003-11-08typos from Jonathon Gray;Jason McIntyre
2003-11-07Check to make sure that the packet was received on a carp-enabled interface.Ryan Thomas McBride
Pointed out by Marco Pfatschbacher, ok mickey@
2003-11-07Clean up carp_iamatch() behaviour so we don't reply to arp requests whenRyan Thomas McBride
the interface is ifconfig'd down. Patch from Marco Pfatschbacher
2003-11-07Add missing #ifdef INET6.Ryan Thomas McBride
Courtesy of markus@
2003-11-06the previous change caused invalid checksums in some cases (rdr),Daniel Hartmeier
back it out temporarily, ok cedric@
2003-11-05Cleanups.Ryan Thomas McBride
- Remove error variable which is not needed. - Add missing /* INET6 */ comments.
2003-11-04add in(6)_pcblookup_listen() and replace all calls to in_pcblookup()Markus Friedl
with either in(6)_pcbhashlookup() or in(6)_pcblookup_listen(); in_pcblookup is now only used by bind(2); speeds up pcb lookup for listening sockets; from Claudio Jeker
2003-11-04Add carp_setroute(), add and remove routes when the carp(4) interfaceRyan Thomas McBride
enters and leaves MASTER state. Allows the system to connect to the common address when it is master. ok cedric@ henning@
2003-11-04Use MGETHDR() instead of m_gethdr()Ryan Thomas McBride
Patch from Marco Pfatschbacher (Marco_Pfatschbacher at genua dot de)
2003-11-04- Remove bogus function prototypeRyan Thomas McBride
- Put the correct address family in the BPF header Pointed out by Max Laier.
2003-11-04kill a no longer relevant todo itemMichael Shalayeff
2003-11-04Some cleanups from Andrey Matveev <andrushock@korovino.net>:Ryan Thomas McBride
- remove duplicate string; - carp_set_addr() -> carp_set_addr6() when INET6; - spacing police. Oh yeah, and we can take inet6 support off the todo list.
2003-11-03There is no point in checking NIC capabilities before calling pf_test(),Cedric Berger
since pf_test() can drop the packet or route it through another NIC. ok dhartmei@ mcbride@ comment requested by markus@
2003-11-03Cleanups:Ryan Thomas McBride
- missing #ifdef INET6. - fix check for interface going down in carp_send_ad(). - fix memory leak which occurs when when ifpromisc() fails. All from Max Laier, thanks.
2003-11-03spacingTheo de Raadt
2003-11-03Some KNF cleanup. There's probably more to do.Ryan Thomas McBride
2003-11-02Typo; #ifdef INET not INET6.Ryan Thomas McBride
From Max Laier.
2003-10-31Add IPv6 support to CARP.Ryan Thomas McBride
ok deraadt@
2003-10-27Skew the advertisement interval correctly when we reschedule.Ryan Thomas McBride
2003-10-27Also check if we're going down before scheduling an advertisementRyan Thomas McBride
when we fail to get an mbuf. This too is courtesy of Max Laier.
2003-10-27Actually stop sending advertisements if we're Master and the carp(4)Ryan Thomas McBride
interface is brought down. Bug reported by Max Laier.
2003-10-25additional hash for local port; improves speed of implicit bindMarkus Friedl
from >1000K cpu cycles to 20-30K for 18000 sockets on i386; test+feedback by Claudio Jeker; ok itojun@; [make sure you rebuild netstat/systat, too]
2003-10-25precompute most of hmac; fix size for md; ok mcbrideMarkus Friedl
2003-10-23We want to hash the whole md, not just the size of the pointer.Ryan Thomas McBride
Found testing CARP between sparc and sparc64.
2003-10-22switch from keyed sha1 to hmac-sha1; ok mcbride@Markus Friedl
2003-10-20Fix endianness bug in carp_sha1_generate, hash the whole counter, andRyan Thomas McBride
fix some whitespace nits while we're here.
2003-10-20Stop all hosts from insisting they're master when preemption isRyan Thomas McBride
disabled. bug report and fix testing david@
2003-10-20Fix but with setting advskew, only error if _both_ advbase and advskew areRyan Thomas McBride
set to 0. (ifconfig sets them one at a time) tested by david@
2003-10-19more typosDavid Krause
2003-10-17Common Address Redundancy ProtocolRyan Thomas McBride
Allows multiple hosts to share an IP address, providing high availability and load balancing. Based on code by mickey@, with additional help from markus@ and Marco_Pfatschbacher@genua.de ok deraadt@
2003-10-02correct endian handling of ip->ip_off.Jun-ichiro itojun Hagino
do not try to send incomplete fragments on ENOBUFS case (behavior change from 4.4bsd). dhartmei ok
2003-10-01use random number generator to generate IPv6 fragment ID/flowlabel.Jun-ichiro itojun Hagino
cleanup IPv6 flowlabel handling. deraadt ok
2003-09-24on-link DoS by bogus ARP. reported by appleJun-ichiro itojun Hagino
2003-09-21"exp" is a reserved symbol under gcc3/posix. mcbride okJun-ichiro itojun Hagino
2003-08-15change arguments to suser. suser now takes the process, and a flagsTed Unangst
argument. old cred only calls user suser_ucred. this will allow future work to more flexibly implement the idea of a root process. looks like something i saw in freebsd, but a little different. use of suser_ucred vs suser in file system code should be looked at again, for the moment semantics remain unchanged. review and input from art@ testing and further review miod@
2003-08-14m_copyback()'s 4th arg is const void *, nuke (caddr_t) casts.Jason Wright
2003-07-29fixup ip_len back to wire format after reass.Jun-ichiro itojun Hagino
2003-07-28allow gif(4) over ipsec: mark mbuf for transport mode SA,Markus Friedl
so in_gif_input can detect whether a proto 4 header is due to ipsec tunnel mode or gif(4) encapsulation; fixes pr 3023 ok itojun@. provos@ and angelos@ agree; tested by sturm@
2003-07-24update ip_len to reflect tunnel header removal (lost duing ip_lenMarkus Friedl
flip changes); ok itojun; noticed by jrrs@ice-nine.org
2003-07-24conform to RFC2367 on SADB_xx naming (local name must be prefixed withJun-ichiro itojun Hagino
SADB_X_xx)
2003-07-24hmac-sha2-{256,384,512} support in AH/ESP auth. markus okJun-ichiro itojun Hagino
2003-07-09do not flip ip_len/ip_off in netinet stack. deraadt ok.Jun-ichiro itojun Hagino
(please test, especially PF portion)
2003-07-09fix whitespaceMarkus Friedl
2003-07-09better vif_delete (no dangling ref to struct ifnet). deraadt okJun-ichiro itojun Hagino
it won't affect default GENERIC build - as MROUTING is not defined
2003-07-08make sure the packets contains a complete inner headerMarkus Friedl
for ip{4,6}-in-ip{4,6} encapsulation; fixes panic for truncated ip-in-ip over ipsec; ok angelos@
2003-07-04knf typoMarkus Friedl