wireguard-openbsd - WireGuard implementation for the OpenBSD kernel

	Commit message (Collapse)	Author	Age	Files	Lines
*	unifdef INET in net code as a precursor to removing the pretend option.	tedu	2014-12-19	1	-6/+1
\| \| \| \| \|	long live the one true internet. ok henning mikeb
*	Fewer <netinet/in_systm.h> !	mpi	2014-07-22	1	-2/+1
\|
*	improve IPsec/ENC interaction:	markus	2012-03-15	1	-44/+11
\| \| \| \| \| \| \| \| \| \| \|	- ipip_input() recalculate the IP header checksum if the tos bits are changed after decapsulation. Otherwise these packets are dropped later in the stack. - ip_ecn_egress(): do not drop packets for IPsec if the outter packet of a Tunnel has the ECN-CE bit set (Congestion Experienced) and the inner packet does not indicate support ECN. - remove unused ip6_ecn_ingress(), ip6_ecn_egress() code ok mikeb@
*	bring in ECN support from KAME.	kjc	2002-05-16	1	-13/+72
\| \| \| \| \| \| \| \| \| \| \| \|	it consists of - ECN support in TCP - tunnel-egress and fragment reassembly rules in layer-3 not to lose congestion info at tunnel-egress and fragment reassembly to enable ECN in TCP, build a kernel with TCP_ECN, and then, turn it on by "sysctl -w net.inet.tcp.ecn=1". ok deraadt@
*	Cut down on include files.	angelos	2001-06-08	1	-7/+1
\|
*	sync whitespace/comment with kame. to help merge tasks	itojun	2001-02-16	1	-4/+4
\|
*	bring in KAME IPv6 code, dated 19991208.	itojun	1999-12-08	1	-0/+148
	replaces NRL IPv6 layer. reuses NRL pcb layer. no IPsec-on-v6 support. see sys/netinet6/{TODO,IMPLEMENTATION} for more details. GENERIC configuration should work fine as before. GENERIC.v6 works fine as well, but you'll need KAME userland tools to play with IPv6 (will be bringed into soon).