| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Add per-TDB counters and a new SADB extension to export them to |   mpi | 2018-08-28 | 1 | -1/+31 |
| * | Introduce ipsec_output_cb() to merge duplicate code and account for | mpi | 2018-07-12 | 1 | -1/+8 |
| * | Convert AH & IPcomp to ipsec_input_cb() and count drops on input. | mpi | 2018-07-11 | 1 | -2/+4 |
| * | Introduce new IPsec (per-CPU) statistics and refactor ESP input | mpi | 2018-07-10 | 1 | -7/+57 |
| * | Keep kernel defines under #ifdef _KERNEL. | mpi | 2017-11-20 | 1 | -8/+3 |
| * | Unbreak ENCDEBUG kernels by declaring `encdebug' in ip_ipsp.h | mpi | 2017-11-15 | 1 | -1/+2 |
| * | Introduce ipsec_sysctl() and move IPsec tunables where they belong. | mpi | 2017-11-14 | 1 | -1/+47 |
| * | Make {ah,esp,ipcomp}stat use percpu counters. |   visa | 2017-11-08 | 1 | -1/+2 |
| * | Dump IPsec flows by iterating over the rafdix-tree. | mpi | 2017-10-27 | 1 | -1/+3 |
| * | Last changes before running IPsec w/o KERNEL_LOCK(). | mpi | 2017-10-16 | 1 | -2/+1 |
| * | Split a part of tdb_delete() into tdb_unlink() so that we can remove |   patrick | 2017-06-26 | 1 | -1/+2 |
| * | Move IPsec forward and local policy check functions to ipsec_input.c |   bluhm | 2017-05-22 | 1 | -1/+3 |
| * | The function name ip4_input() is confusing as it also handles IPv6 | bluhm | 2017-05-18 | 1 | -5/+1 |
| * | Convert the xformsw definition to C99 style initializer. Also fix | bluhm | 2017-05-06 | 1 | -2/+2 |
| * | Pass down the address family through the pr_input calls. This | bluhm | 2017-04-14 | 1 | -8/+8 |
| * | Error propagation does neither make sense for ip input path nor for | bluhm | 2017-02-07 | 1 | -2/+2 |
| * | Change the IPv4 pr_input function to the way IPv6 is implemented, | bluhm | 2017-01-29 | 1 | -12/+6 |
| * | Reduce the difference between struct protosw and ip6protosw. The | bluhm | 2017-01-26 | 1 | -4/+4 |
| * | Since raw_input() and route_input() are gone from pr_input, we can | bluhm | 2017-01-25 | 1 | -6/+6 |
| * | move from RB macros to RBT functions |   dlg | 2016-09-15 | 1 | -5/+5 |
| * | remove some unused defines. ok mikeb |   tedu | 2015-12-03 | 1 | -9/+1 |
| * | correct #if/#endif guard comment |   deraadt | 2015-08-25 | 1 | -2/+2 |
| * | manage spd entries by using the radix api directly instead of |   blambert | 2015-07-17 | 1 | -1/+7 |
| * | introduce ipsec-id bundles and use them for ipsecflowinfo, |   markus | 2015-05-23 | 1 | -15/+27 |
| * | Stubs and support code for NIC-enabled IPsec bite the dust. |   mikeb | 2015-04-17 | 1 | -7/+2 |
| * | Remove unsupported SADB_X_IDENTTYPE_CONNECTION; OK markus, hshoexer | mikeb | 2015-04-17 | 1 | -2/+1 |
| * | ipa_inp_next is unused; via mikeb@ | markus | 2015-04-16 | 1 | -2/+1 |
| * | remove unfinished/unused support for socket-attached ipsec-policies | markus | 2015-04-16 | 1 | -39/+1 |
| * | make ipsp_address thread safe; ok mpi | mikeb | 2015-04-14 | 1 | -2/+2 |
| * | Remove support for storing credentials and auth information in the kernel. | mikeb | 2015-04-14 | 1 | -20/+3 |
| * | Rename gettdbbyaddr to gettdbbydst; OK markus, hshoexer, mpi | mikeb | 2015-04-13 | 1 | -3/+3 |
| * | Remove unused arguments from gettdb* functions; OK markus, hshoexer, mpi | mikeb | 2015-04-13 | 1 | -5/+4 |
| * | Remove bits of unfinished IPsec proxy support. DNS' KX records, anyone? | mikeb | 2015-03-26 | 1 | -2/+1 |
| * | mikeb points out that 'struct ipsec_policy' can also be hidden by _KERNEL | deraadt | 2015-01-19 | 1 | -5/+1 |
| * | First step of hiding many kernel-only parts of <netinet/ip_ipsp.h> | deraadt | 2015-01-19 | 1 | -2/+12 |
| * | unifdef some more INET. v4 4life. | tedu | 2014-12-23 | 1 | -9/+1 |
| * | The proliferation of "struct route" in all its flavors didn't make | mpi | 2014-11-25 | 1 | -13/+1 |
| * | Replace most of our formating functions to convert IPv4/6 addresses from | mpi | 2013-11-11 | 1 | -3/+2 |
| * | These functions are only used in debug code, so put them under | mpi | 2013-07-04 | 1 | -1/+3 |
| * | Remove the extern keyword from function declarations, document | mpi | 2013-04-11 | 1 | -128/+102 |
| * | Merge of an original work by markus@ and gerhard@ to increase | mikeb | 2013-02-14 | 1 | -2/+5 |
| * | simplify checkreplaywindow() API; make call/return code handling consistent | markus | 2012-10-18 | 1 | -3/+2 |
| * | Forward declare struct m_tag in netinet/ip_ipsp.h so we don't need to |   camield | 2012-10-08 | 1 | -1/+3 |
| * | spltdb() was really just #define'd to be splsoftnet(); replace the former | blambert | 2012-09-20 | 1 | -10/+2 |
| * | remove the SADB_X_SAFLAGS_{HALFIV,RANDOMPADDING,NOREPLAY} pfkey-API (not set | markus | 2012-09-18 | 1 | -4/+1 |
| * | add IP_IPSECFLOWINFO option to sendmsg() and recvmsg(), so npppd(4) | markus | 2012-07-16 | 1 | -2/+2 |
| * | Add support for the Extended (64-bit) Sequence Number as defined | mikeb | 2012-06-29 | 1 | -5/+6 |
| * | Retire Skipjack | mikeb | 2010-10-06 | 1 | -2/+1 |
| * | remove m_pad in favor of m_inject as it's equivalent to m_inject | mikeb | 2010-09-23 | 1 | -4/+1 |
| * | Add support for using IPsec in multiple rdomains. |   reyk | 2010-07-09 | 1 | -9/+14 |
