wireguard-openbsd/sys/netinet/ip_esp.c, branch jd/simplify-queueingWireGuard implementation for the OpenBSD kernelhttps://git.zx2c4.com/wireguard-openbsd/atom/sys/netinet/ip_esp.c?h=jd%2Fsimplify-queueing2019-09-30T01:53:04Zremove the "copy function" argument to bpf_mtap_hdr.2019-09-30T01:53:04Zdlgdlg@openbsd.org2019-09-30T01:53:04Zurn:sha1:f1d9eb9729dfae311f02f30dbeca129d9ca1f384
it was previously (ab)used by pflog, which has since been fixed.
apart from that nothing else used it, so we can trim the cruft.
ok kn@ claudio@ visa@
visa@ also made sure i fixed ipw(4) so i386 won't break.
Add per-TDB counters and a new SADB extension to export them to2018-08-28T15:15:02Zmpimpi@openbsd.org2018-08-28T15:15:02Zurn:sha1:2edaa7bab8dc7eebcf170add906583e7aa0263bf
userland.
Inputs from markus@, ok sthen@
Introduce ipsec_output_cb() to merge duplicate code and account for2018-07-12T15:51:50Zmpimpi@openbsd.org2018-07-12T15:51:50Zurn:sha1:7ced204ee2fdf209a5f0c84ecd143e75b272f616
dropped packets in the output path.
While here fix a memory leak when compression is not needed w/ IPcomp.
ok markus@
Convert AH & IPcomp to ipsec_input_cb() and count drops on input.2018-07-11T09:07:59Zmpimpi@openbsd.org2018-07-11T09:07:59Zurn:sha1:e534e17823dfe6b522b2271f74a546ec1251dcce
ok markus@
Introduce new IPsec (per-CPU) statistics and refactor ESP input2018-07-10T11:34:12Zmpimpi@openbsd.org2018-07-10T11:34:12Zurn:sha1:4ec8e25772ec895c764863f5d4828a7311b1d90e
callbacks to be able to count dropped packet.
Having more generic statistics will help troubleshooting problems
with specific tunnels. Per-TDB counters are coming once all the
refactoring bits are in.
ok markus@
Cleanup IPsec ESP error handling with consistent goto drop.2018-05-09T16:00:28Zbluhmbluhm@openbsd.org2018-05-09T16:00:28Zurn:sha1:52d03b77e7e9444ffaf503f8c63e0632d7dee693
with and OK markus@
Do not assume that mbufs within a chain do not have M_PKTHDR set.2018-05-02T21:28:01Zbluhmbluhm@openbsd.org2018-05-02T21:28:01Zurn:sha1:23702ca15015f442595480732a64429c3c19f912
This could happen during fragment reassembly. Better check if we
are dealing with the first mbuf of the chain.
m_adj() changes the length of the mbuf, obviously. So when using
this length to calulate the amount of adjustment, do not calculate
it again after m_adj() with wrong input. Use a temporary variable
to save the value.
from Maxime Villard, NetBSD; OK markus@ claudio@
Make {ah,esp,ipcomp}stat use percpu counters.2017-11-08T16:29:20Zvisavisa@openbsd.org2017-11-08T16:29:20Zurn:sha1:6460338bf79df51c10552c84e50b189f0d9711e4
OK bluhm@, mpi@
Use %s and __func__ in DPRINTF() to reduce false positive with grep(1).2017-11-06T15:12:43Zmpimpi@openbsd.org2017-11-06T15:12:43Zurn:sha1:b94b29dd86292a69beeac0ac8f34be46b1cb12ed
ok kettenis@, dhill@, visa@, jca@
Remove NET_LOCK()'s argument.2017-08-11T21:24:19Zmpimpi@openbsd.org2017-08-11T21:24:19Zurn:sha1:aa28b9a6d024fc39940a8bf6e59c28dbaafc6950
Tested by Hrvoje Popovski, ok bluhm@