summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Expand)Author
2021-10-13Remove redundant NULL checks in IPsec which are never reached.Alexander Bluhm
2021-10-13The function crypto_dispatch() never returns an error. Make itAlexander Bluhm
2021-10-13The function ipip_output() was registered as .xf_output() xformAlexander Bluhm
2021-10-05Cleanup the error handling in ipsec ipip_output() and consistentlyAlexander Bluhm
2021-10-05Move setting ipsec mtu into a function. The NULL and invalid checkAlexander Bluhm
2021-09-29Global variables to track initialisation behave poorly with MP.Alexander Bluhm
2021-08-10Remove unused `ipa_pcb' from 'ipsec_acquire' structure.mvs
2021-08-09During unidirectional data transmission, a TCP connection may stall.Alexander Bluhm
2021-08-09Fix white spaces.Alexander Bluhm
2021-07-27Revert "Use per-CPU counters for tunnel descriptor block" diff.mvs
2021-07-26Use per-CPU counters for tunnel descriptor block (tdb) statistics.mvs
2021-07-26Do not queue crypto operations for IPsec. The packet entries inAlexander Bluhm
2021-07-26The mbuf header cleanup in revision 1.173 of ip_icmp.c was tooAlexander Bluhm
2021-07-21Also count crypto errors in ipsec_input_cb() like IPsec output inAlexander Bluhm
2021-07-21Propagate errors from crypto_invoke() and count them in IPsec. TheyAlexander Bluhm
2021-07-19Remove `ids' from `ipsec_ids_tree' while following ipsp_ids_insert()mvs
2021-07-18Introduce and use garbage collector for 'ipsec_ids' struct entitiesmvs
2021-07-18The IPsec authentication before decryption used a different replayAlexander Bluhm
2021-07-16Improve comments in IPsec replay window calculation.Alexander Bluhm
2021-07-14Resend the TCP packet only if the MTU locked flag appears at theAlexander Bluhm
2021-07-13Remove unused `PolicyHead' from 'sockaddr_encap' structure.mvs
2021-07-08The xformsw array never changes. Declare struct xformsw constantAlexander Bluhm
2021-07-08Initialize `ipsec_acquire_pool' pool (9) within pfkey_init() instead ofmvs
2021-07-08Debug printfs in encdebug were inconsistent, some missing newlinesAlexander Bluhm
2021-07-08The properties of the crypto algorithms never change. Declare themAlexander Bluhm
2021-07-07tell ether_input() to call pf_test() outside of smr_read sections,Alexandr Nedvedicky
2021-07-07Fix whitespaces in IPsec code.Alexander Bluhm
2021-06-30For path MTU discovery tcp_mtudisc() should resend a TCP packet byAlexander Bluhm
2021-06-21Fix uninitialized variables introduced in rev 1.361Jeremie Courreges-Anglas
2021-06-18The crypto(9) framework used by IPsec runs on a kernel task thatAlexander Bluhm
2021-06-03remember if the ipv4 header checksum is ok.David Gwynne
2021-06-02factor out the code that does basic sanity checks on ipv4 headers.David Gwynne
2021-05-25As network features are not added dynamically, the domain structuresAlexander Bluhm
2021-05-15Fix IPsec NAT-T to work with pipex(4). Introduce a new packet tagYASUOKA Masahiko
2021-05-12Use local copy of `ps_rtableid' in ip{,6}_ctloutput() and markmvs
2021-05-04Initialize `ipsec_policy_pool' within pfkey_init() instead of doing thatmvs
2021-04-30Rearrange the implementation of bounded sysctl. The primitiveAlexander Bluhm
2021-04-28Use mq_delist() to fetch the ARP mbuf hold queue once and feed theAlexander Bluhm
2021-04-28Document the locking mechanism of the global variables in ARP code.Alexander Bluhm
2021-04-26Convert the ARP packet hold queue from mbuf list to mbuf queue whichAlexander Bluhm
2021-04-23Setting variable arpinit_done is not MP save if we want to executeAlexander Bluhm
2021-04-23The variable la_hold_total contains the number of packets currentlyAlexander Bluhm
2021-04-16Turn on the direct ACK on every other segment.Alexander Bluhm
2021-03-30[ICMP] IP options lead to malformed replyAlexandr Nedvedicky
2021-03-20use m_dup_pkthdr in ip_fragment to copy pkthdr info to fragments.David Gwynne
2021-03-10spellingJonathan Gray
2021-03-07use uint64_t ethernet addresses for compares in carp.David Gwynne
2021-03-05pass the uint64_t dst ethernet address from ether_input to bridges.David Gwynne
2021-03-01Refactor ip_fragment() and ip6_fragment(). Use a mbuf list toAlexander Bluhm
2021-02-26add some helpers for working with ethernet addresses as uint64_tDavid Gwynne