aboutsummaryrefslogtreecommitdiffstatshomepage
Commit message (Collapse)AuthorAgeFilesLines
...
* android: fix readmeJason A. Donenfeld2017-07-261-2/+2
|
* version: bump snapshot0.0.20170726Jason A. Donenfeld2017-07-262-2/+2
|
* wg-quick: add explicit support for common DNS usageJason A. Donenfeld2017-07-262-12/+34
|
* wg-quick: do not use grepJason A. Donenfeld2017-07-241-1/+1
|
* wg-quick: do not set explicit src route for v6 default routeJason A. Donenfeld2017-07-241-11/+3
| | | | | | | | | This was only required because clueless network operators were trying to route fec0::/10 globally, when that range doesn't actually have global scope. Now that we understand the cause was operator error, we revert the change here, so that the routing table is kept consistent. This reverts commit 64e47de870a2f0575b5564a70e5680b48ab83ff9.
* android: add port of wg-quickJason A. Donenfeld2017-07-244-0/+259
|
* wg-quick: usage typosJason A. Donenfeld2017-07-201-1/+2
|
* qemu: warn on all unseeded random usage when in debug modeJason A. Donenfeld2017-07-201-0/+1
|
* global: wireguard.io --> wireguard.comJason A. Donenfeld2017-07-2015-19/+19
| | | | | Due to concerns with the .io TLD, we are switching to using wireguard.com instead.
* blake2s: fix up alignment issuesJason A. Donenfeld2017-07-201-9/+11
| | | | | When it's unclear if block is aligned, we just assume unaligned, rather than branching.
* blake2s: move compression loop to assemblySamuel Neves2017-07-203-72/+84
|
* send: use skb_queue_empty where appropriateSamuel Holland2017-07-201-3/+3
| | | | Signed-off-by: Samuel Holland <samuel@sholland.org>
* data: simplify no-keypair failure caseSamuel Holland2017-07-201-5/+2
| | | | Signed-off-by: Samuel Holland <samuel@sholland.org>
* data: use KMEM_CACHE macroJason A. Donenfeld2017-07-201-2/+2
| | | | Suggested-by: Samuel Holland <samuel@sholland.org>
* ratelimiter: use KMEM_CACHE macroJason A. Donenfeld2017-07-201-6/+6
| | | | Suggested-by: Samuel Holland <samuel@sholland.org>
* global: use pointer to net_deviceJason A. Donenfeld2017-07-2012-52/+46
| | | | | | DaveM prefers it to be this way per [1]. [1] http://www.spinics.net/lists/netdev/msg443992.html
* device: support 4.13's extact newlink paramJason A. Donenfeld2017-07-202-1/+5
|
* send: orphan skbs when buffering longtermJason A. Donenfeld2017-07-201-1/+7
| | | | | | | | | Otherwise we quickly use up all of a socket's memory, which prevents a socket from sending packets to other interfaces. This also has the nice effect of letting TCP connections continue to attempt to begin, with the older ones being naturally rotated out and freed, so when a connection finally is made, only the later TCP connections are attempted, not the ones that would already have timed out.
* selftests: ensure that there isnt CPU lag when testing rate limiterJason A. Donenfeld2017-07-201-1/+25
|
* compat: work around odd kernels that backport kvfreeJason A. Donenfeld2017-07-071-1/+3
|
* socket: styleJason A. Donenfeld2017-07-071-12/+3
|
* qemu: update default testing kernelJason A. Donenfeld2017-07-071-1/+1
|
* ratelimiter: consistently use non-bh rcuJason A. Donenfeld2017-07-072-2/+2
|
* version: bump snapshot0.0.20170706Jason A. Donenfeld2017-07-062-2/+2
|
* socket: the checkers distinguish between _bh and non _bhJason A. Donenfeld2017-07-061-1/+1
|
* device: cleanup register_netdev logicJason A. Donenfeld2017-07-062-15/+12
|
* compat: priv_destructor got backportedJason A. Donenfeld2017-07-061-5/+7
|
* counter: use correct unit for indicesJason A. Donenfeld2017-07-061-3/+3
| | | | | Even though redundant bits == bits per long, we're indexing into something that uses longs as its unit, so this is correct.
* ratelimiter: add self-testJason A. Donenfeld2017-07-064-1/+121
|
* ratelimiter: use IPv6 /64 instead of /96Jason A. Donenfeld2017-07-041-8/+8
|
* ratelimiter: use kvzalloc for hash table allocationJason A. Donenfeld2017-07-042-9/+41
|
* gitignore: ignore split DWARF debug infoSamuel Holland2017-07-031-0/+1
| | | | Signed-off-by: Samuel Holland <samuel@sholland.org>
* compat: workaround Ubuntu 16.10 kernel weirdnessJason A. Donenfeld2017-07-031-0/+1
|
* compat: support OpenSUSE's backportsJason A. Donenfeld2017-07-031-1/+6
|
* receive: cleanup error handlersJason A. Donenfeld2017-06-291-21/+23
|
* version: bump snapshot0.0.20170629Jason A. Donenfeld2017-06-292-2/+2
|
* receive: pull IP header into headJason A. Donenfeld2017-06-291-0/+4
|
* receive: fix off-by-one in packet length checkingJason A. Donenfeld2017-06-291-1/+1
| | | | | | | | | | | | This caused certain packets to be rejected that shouldn't be rejected, in the case of certain scatter-gather ethernet drivers doing GRO pulling right up to the UDP bounds but not beyond. This caused certain TCP connections to fail. Thanks very much to Reuben for providing access to the machine to debug this regression. Reported-by: Reuben Martin <reuben.m@gmail.com>
* tools: remove double include in ipcJason A. Donenfeld2017-06-291-1/+0
|
* version: bump snapshot0.0.20170628Jason A. Donenfeld2017-06-282-2/+2
|
* compat: support Ubuntu 14.04Jason A. Donenfeld2017-06-281-4/+10
|
* compat: support EL7.3Jason A. Donenfeld2017-06-281-16/+21
|
* wg-quick: use printf -v instead of namerefs for bash 4.2Jason A. Donenfeld2017-06-281-3/+2
| | | | I'm not happy about this.
* compat: do not export symbols unnecessarilyJason A. Donenfeld2017-06-284-34/+0
|
* global: cleanup IP header checkingJason A. Donenfeld2017-06-267-77/+46
| | | | This way is more correct and ensures we're within the skb head.
* device: remove icmp conntrack hacksJason A. Donenfeld2017-06-263-35/+37
| | | | This logic belongs upstream.
* compat: clean up cruftJason A. Donenfeld2017-06-261-4/+2
|
* device: avoid double icmp send on routing loopJason A. Donenfeld2017-06-261-1/+0
|
* socket: use ip_rt_put instead of dst_releaseJason A. Donenfeld2017-06-261-2/+2
|
* socket: verify saddr belongs to interfaceJason A. Donenfeld2017-06-262-1/+9
| | | | | This helps "unstick" stuck source addresses, when changing routes dynamically.
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.