summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Collapse)Author
2005-05-10support NULL encryption for ESP; ok hshoexer, hoMarkus Friedl
2005-04-25csum -> csum_flagsBrad Smith
ok krw@ canacar@
2005-04-21handle return value of snprintf correctlyHans-Joerg Hoexer
ok deraadt@
2005-04-20Introduce if_linkstatehooks.Marco Pfatschbacher
This converts if_link_state_change() to a generic usable callback with dohooks(). OK henning@, camield@ Tested by camield@ and Alexey E. Suslikov
2005-04-16re-registerTheo de Raadt
2005-04-12handle PMTU for ipip SAs, too; ok hshoexer, cloderMarkus Friedl
2005-04-05add tcp sack stats, similar to freebsd; ok deraadtMarkus Friedl
2005-03-28add some const to ether_*. remove bonus prototypes this brought out.Ted Unangst
ok deraadt@
2005-03-15- stop tearing down routes when the carp interface goes to backup in theRyan Thomas McBride
carpdev case; block outgoing packets in carp_output() instead. - unbreak the "bow out on 'ifconfig down'" behaviour, allows instant failover on graceful halt/reboot to work again. ok mpf@ henning@
2005-03-13fix a potential crash that could occur when CARP_LOG is being used.Patrick Latifi
ok mcbride
2005-03-12make sure code and comment matchMarkus Friedl
2005-03-09from freebsd:Markus Friedl
1. set rcv_laststart/rcv_lastend after checking the tcp window 2. pass rcv_laststart and rcv_lastend on the stack (shrink tcp state) ok henning, djm
2005-03-07Correctly compare routes in in_addprefix. If a netmask is supplied it needsClaudio Jeker
to be compared too -- 10/8 and 10/24 are not equal. This fixes a problem with overlapping networks reported by Simon Slaytor. OK henning@
2005-03-05Remove code which enforces a advskew=0 for the caseMarco Pfatschbacher
that carp shares the IP addresse with its physical interface. It's neither supported nor needed, since we have carpdev now. ok mcbride@
2005-03-04- check th_ack against snd_una/max; from Raja Mukerji via hugh@Markus Friedl
- limit pool to tcp_sackhole_limit entries (sysctl-able) - stop sack option processing on pool_get errors - use SEQ_MIN/SEQ_MAX ok henning, hshoexer, deraadt
2005-03-01Unbreak arp_input with carp; add back the call to carp_iamatch()Ryan Thomas McBride
which was removed in rev 1.57. This makes arpbalance work again, and ensures that only one carp host will reply to a given arp request. ok mpf@ pascoe@ dhartmei@ deraadt@
2005-02-28Remove unused variable if_flags in struct carp_softc, ok mickey@Ryan Thomas McBride
2005-02-271. tcp_xmit_timer(): remove extra rtt decrement (t_rtttime is 0-basedMarkus Friedl
while t_rtt was 1-based), update callers 2. define and use TCP_RTT_BASE_SHIFT instead of the hardcoded 2. 3. add missing shifts when t_srtt/t_rttvar are used. 4. update the comments: t_srtt uses 5 bits of fraction (not 3) and t_rttvar uses 4 bits 5. remove obsolete/unused macros TCP_RTT_SCALE and TCP_RTTVAR_SCALE 6. make sure rttmin is not > TCPTV_REXMTMAX parts from netbsd, ok mcbride, henning
2005-02-22Move #ifdef INET6 outside of 'case AF_INET6:' in tcp_ident().Ryan Thomas McBride
No functional change due to earlier check, fix from Maxim Konovalov <maxim@macomnet.ru> ok deraadt@ dhartmei@
2005-02-17miscellaneous typo fixes:Jean-Francois Brousseau
- sturct -> struct (spotted by pedro) - elimination of consecutive 'the' words ok jmc@, henning@, krw@, robert@, some whining by jolan@
2005-02-08build w/o INET6; ok mpf@, mcbride@Markus Friedl
2005-02-07Unrevert the changes introduced in 1.96 and accidentally removed in 1.97Ryan Thomas McBride
with an id10t error by yours truly.
2005-02-07Prevent carp from attaching to other carp interfaces, which theRyan Thomas McBride
ifp->if_flags & IFF_MULTICAST checks no longer protect against. ok pascoe@ mpf@
2005-02-07There is no SIOCDIFADDR call into interfaces on address deletion, soChristopher Pascoe
use our carp_addr_updated callback to detect deletion and reconfigure appropriately. ok mcbride@
2005-01-29Check the carpdev link state when we attach to it, makes a firewallRyan Thomas McBride
with an interface down avoid preempting after a reboot. Pointed out by Stephen Marley <stephen.marley@catwoman.cl-is.com> ok pascoe@ mpf@
2005-01-20expire ipforward_rt cache in ip_slowtimeo; fixes pr 1697; ok claudioMarkus Friedl
2005-01-18Rewriting the lladdr can now be done without using mbuf tags.Marco Pfatschbacher
Advertisements run through the carp interface first. So we just take the address from ifp0. While we're there, also remove carp_macmatch6, which isn't used anymore. Proposed by mcbride@ ok mcbride@, pascoe@
2005-01-18Use correct source address for ICMP errors generated from packets that wereClaudio Jeker
not addressed to the machine. If the destination is not a local address do a route lookup for the original source address and use the returned interface address. This solves problems seen on interfaces with multiple networks defined. OK henning@ markus@
2005-01-15From NetBSD:Christopher Pascoe
- Keep track of allhost multicast address record we joined into each in_ifaddr and delete it when an address is purged. - Don't simply try to delete a multicast address record listed in the ia_multiaddrs. It results a dangling pointer. Let whoever holds a reference to it to delete it. mcbride@ markus@ ok
2005-01-15fix commentBrad Smith
2005-01-14Duplicate nested if statement in PIM code.Ryan Thomas McBride
From brad@
2005-01-14Add kernel support for Protocol Independant Multicast (PIM)Ryan Thomas McBride
Information: http://netweb.usc.edu/pim/ From Pavlin Radoslavov <pavlin@icir.org> ok deraadt@ brad@
2005-01-10Make sure bogus values don't make their way into tcp_xmit_timer() calculations.Ryan Thomas McBride
- Ignore ts_ecr if it is 0, or the resulting rtt is out of range. (use tp->t_rtttime instead) - Initialise tcp_now to 1, to avoid the 500ms window where a valid ts_ecr of 0 could be ignored. - Convert out-of-range rtt values to valid ones in tcp_xmit_timer(). ok frantzen@ markus@
2005-01-06spacingTheo de Raadt
2005-01-06Attach multicast to the carp interface for IPv6 (makes it consistent withRyan Thomas McBride
IPv4, and will allow us to get rid of carp_fix_lladdr() and the carp mbuf tag later). ok pascoe@ mpf@
2005-01-06Error path cleanups for carp_output. Use ENOBUFS instead of ENOMEM whenChristopher Pascoe
unable to tag a packet, and free mbuf chain on all failures. ok mcbride@
2005-01-06Tag all packets sent via a CARP interface for link local addressChristopher Pascoe
substitution. With this change and the previous ARP changes, all Ethernet packets sent via a CARP interface should now have the virtual MAC address as the source. ok mcbride@ niklas@
2005-01-04restrict forwarding to ipsec processed traffic of ip.forwarding==2Markus Friedl
ok deraadt, henning, fgsch, mcbride
2005-01-04Move processing of ARP packets for CARP addresses to the carp interfaceChristopher Pascoe
instead of processing them in the parent interface. This causes us to send ARP packets on a carpdev with its virtual MAC address as the source, rather than the parent's physical address. Permits us to fail over cleanly when connected to devices that use the source MAC address on a received ARP request to generate an ARP entry for the requesting host, rather than going through the who-has/is-at procedure. ok niklas@ mcbride@
2005-01-04Use pseudo_AF_HDRCMPLT for outgoing ARP messages, otherwise the providedChristopher Pascoe
source MAC address we provide is ignored by ether_output. ok mcbride@ niklas@
2004-12-30handle rtt < 0; markus okTheo de Raadt
2004-12-29fix indentMarkus Friedl
2004-12-22Instead of running carp_setroute synchronously, use if_addrhooks to get aChristopher Pascoe
callback after in_ifinit has run. This lets us correct any routes that in_ifinit has incorrectly added for our interface. Also be more explicit with the routing checks/changes that we make. This makes it possible to have different prefix lengths on a CARP interface and the physical interface it is bound to. ok mcbride@
2004-12-19#define sc_if sc_ac.ac_if, makes things a little more readable, andRyan Thomas McBride
kills a couple of ugly line wraps. From Max Laier. ok pascoe@
2004-12-19Make it possible for carp to work on fddi and token ring again.Ryan Thomas McBride
ok pascoe@ mpf@
2004-12-18Decrement carp_suppress_preempt when detaching an interface that hasChristopher Pascoe
been experiencing output errors. ok mcbride@
2004-12-17Temporary fix to get IPv6 working again.Marco Pfatschbacher
v6 advertisements are still received the old-fashioned way. ok mcbride@
2004-12-17Reorder code in the ethernet output path, and enhance unicast addressChristopher Pascoe
matching in the bridge receive path to make CARP operate correctly on physical interfaces that are participating in a bridge. ok mcbride@ henning@ dlg@
2004-12-17Remember to decrement carp_suppress_preempt when detaching.Ryan Thomas McBride
ok pascoe@
2004-12-15Add IFF_NOARP to carp interface, we want arp requests to be handled viaRyan Thomas McBride
carp_iamatch() on the physical interface. ok pascoe@ mpf@