| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
| |
these values are used as the backpressure thresholds in the interface
rx q processing code. theyre being exposed as tunables to userland
while we are figuring out what the best values for them are.
ok visa@ deraadt@
|
|
|
|
| |
OK bluhm@, jca@
|
|
|
|
|
|
| |
mp-safe.
ok bluhm@, visa@
|
|
|
|
|
|
| |
Direction suggested by mpi
OK mpi, visa
|
|
|
|
|
|
| |
Exposes per-CPU counters to real parrallelism.
ok visa@, bluhm@, jca@
|
|
|
|
| |
Tested by Hrvoje Popovski, ok bluhm@
|
|
|
|
| |
tcp md5. OK mpi@
|
|
|
|
|
|
| |
pfctlinput() is only called in the input path with the NET_LOCK() held.
ok bluhm@
|
|
|
|
|
|
|
| |
basic anyway. Simplifies the code a lot also by calling the mpls sysctl no
longer via the protosw but instead directly.
OK mpi@ on a previous diff. Also tested by renato@ who actually found a bug
which is now fixed.
|
|
|
|
| |
ok rzalamena@, bluhm@
|
|
|
|
|
|
|
|
|
|
| |
softnet assert failures. It is better to place the lock into
net_sysctl() where all the protocol sysctls are called via pr_sysctl.
As calling sysctl(2) is in the slow path, doing fine grained locking
has no benefit. Many sysctl cases copy out a struct. Having a
lock around that keeps the struct consistent. Put assertions in
the protocol sysctls that need it.
OK mpi@
|
|
|
|
|
|
|
|
|
| |
at IPL_SOFTNET.
This will allow us to keep locking simple as soon as we trade
splsoftnet() for a rwlock.
ok bluhm@
|
|
|
|
|
|
|
|
| |
the XXX has been there since 1.1, even back in netbsd, and im too
lazy to go back further to try and see why it is there. either way
it is meaningless.
suggested by mikeb@ and mpi@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
link_maxhdr is best explained as the space reserved before an ip
packet payload for link headers, the most common of which is ethernet.
16 was a good choice when the only traffic we really did was ip
over ethernet, but now there are commonly used transports that are
bigger, specifically 802.11 traffic and vlan/vlan encapsulations,
that justify bumping it up.
i chose 64 because it would also allow enough space for encapsulations
like etherip or gif.
this reduces the size of the smallest packet that can fit into an
mbuf before more storage needs to be suffixed, but because most
traffic is either full sized (ie, already bigger than a single mbuf)
or tiny packets (think tcp ACKS, keystrokes over ssh, or dns requests)
the impact is negligible.
ok stsp@ mpi@ sthen@ mikeb@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
length of the key as argument.
This way every consumer of the radix tree has a chance to explicitly
initialize the shared data structures and no longer rely on another
subsystem to do the initialization.
As a bonus ``dom_maxrtkey'' is no longer used an die.
ART kernels should now be fully usable because pf(4) and IPSEC properly
initialized the radix tree.
ok chris@, reyk@
|
|
|
|
|
|
|
| |
As a side effect there's no need to run if_attachdomain() after the
list of domains has been built.
ok claudio@, reyk@
|
|
|
|
|
|
|
|
| |
reaching around through the routing table
original diff by myself, much improved by mikeb@ and mpi@
ok and testing mikeb@ mpi@
|
|
|
|
|
|
|
| |
have any direct symbols used. Tested for indirect use by compiling
amd64/i386/sparc64 kernels.
ok tedu@ deraadt@
|
| |
|
|
|
|
| |
ok mpi@ kspillner@
|
|
|
|
|
|
| |
bluetooth support doesn't work and isn't going anywhere. the current
design is a dead end, and should not be the basis for any future support.
general consensus says to whack it so as to not mislead the unwary.
|
|
|
|
|
| |
don't need to be married.
ok guenther miod beck jsing kettenis
|
|
|
|
|
|
| |
namespace, so stop changing behavior when it's #defined
ok beck@ krw@
|
|
|
|
| |
MHLEN - max_hdr in that place. OK mikeb@
|
|
|
|
| |
ok mikeb@, sthen@, tedu@ (implied), doc bits ok jmc@
|
| |
|
|
|
|
|
|
|
|
| |
`net.pipex.enable' to enable PIPEX. By default, pipex is disabled
and it will not process packets from wire. Update man pages and
update HOWTO_PIPEX_NPPPD.txt for testers.
discussed with dlg@, ok deraadt@ mcbride@ claudio@
|
|
|
|
| |
ok claudio@ krw@
|
|
|
|
|
|
|
|
| |
needed so that the route and inp lookups done in TCP and UDP know where
to look. Additionally in_pcbnotifyall() and tcp_respond() got a rdomain
argument as well for similar reasons. With this tcp seems to be now
fully rdomain save and no longer leaks single packets into the main domain.
Looks good markus@, henning@
|
|
|
|
| |
ok cluadio@ henning@
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
MPLS support partly based on the (abandoned?) AYAME project.
Basic LSR (Label Switch Router) functionality is present, but not fully
functional yet.
It is currently possible to insert entries in the LIB (Label Information Base)
with route(8), but setting the operation type is not supported yet.
Imported to allow more people to work on this in the coming weeks.
ok claudio@ laurent@ dlg@
|
| |
|
|
|
|
|
|
| |
compile and work. need to register pfkey whenever tcp md5 or ipsec is
defined, and the various ipsec encapsulations only if ipsec is defined.
ok theo
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
The code is adopted from the FreeBSD netgraph-based Bluetooth
implementation by Maksim Yevmenkin <m_evmenkin@yahoo.com> but
all netgraph glue was replaced with usual BSD network stack
hooks. This is a work in progress. Only HCI layer works for now,
L2CAP and RFCOMM are on the way.
Help in testing from many, ok markus@.
|
|
|
|
|
|
|
|
| |
while here, fix some spacing, ansi, de-register, etc.
mostly from netbsd
tested & ok otto millert
|
| |
|
|
|
|
| |
ok millert@
|
| |
|
|
|
|
| |
ok canacar@ deraadt@ mcbride@
|
|
|
|
| |
rescinded 22 July 1999. Proofed by myself and Theo.
|
| |
|
| |
|
|
|
|
| |
(Look ma, I might have broken the tree)
|
| |
|
| |
|
|
|
|
|
|
|
|
|
| |
replaces NRL IPv6 layer. reuses NRL pcb layer. no IPsec-on-v6 support.
see sys/netinet6/{TODO,IMPLEMENTATION} for more details.
GENERIC configuration should work fine as before. GENERIC.v6 works fine
as well, but you'll need KAME userland tools to play with IPv6 (will be
bringed into soon).
|
| |
|