| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Convert *_sysctl in ipsec_input.c to sysctl_bounded_arr |   gnezdo | 2020-09-01 | 1 | -11/+33 |
| * | Move range check inside sysctl_int_arr | gnezdo | 2020-08-01 | 1 | -33/+21 |
| * | kernel: use gettime(9)/getuptime(9) in lieu of time_second(9)/time_uptime(9) |   cheloha | 2020-06-24 | 1 | -5/+5 |
| * | Add support for autmatically moving traffic between rdomains on ipsec(4) |   tobhe | 2020-04-23 | 1 | -5/+8 |
| * | remove the "copy function" argument to bpf_mtap_hdr. |   dlg | 2019-09-30 | 1 | -2/+2 |
| * | Remove the last few XXX rdomain markers. Even those functions respect the |   claudio | 2018-11-09 | 1 | -4/+1 |
| * | Initialize the TDB to NULL in ipsec_common_input() and |   mestre | 2018-09-14 | 1 | -3/+3 |
| * | Add per-TDB counters and a new SADB extension to export them to |   mpi | 2018-08-28 | 1 | -3/+15 |
| * | Convert AH & IPcomp to ipsec_input_cb() and count drops on input. | mpi | 2018-07-11 | 1 | -3/+9 |
| * | Introduce new IPsec (per-CPU) statistics and refactor ESP input | mpi | 2018-07-10 | 1 | -15/+110 |
| * | When checking the IPsec enable sysctls, ipsec_common_input() had |   bluhm | 2018-05-14 | 1 | -25/+43 |
| * | Cleanup IPsec common input error handling with consistent goto drop. | bluhm | 2018-05-12 | 1 | -24/+27 |
| * | Sprinkle some NET_ASSERT_LOCKED(), const and co to prepare running | mpi | 2017-11-20 | 1 | -1/+2 |
| * | Introduce ipsec_sysctl() and move IPsec tunables where they belong. | mpi | 2017-11-14 | 1 | -1/+62 |
| * | Make {ah,esp,ipcomp}stat use percpu counters. |   visa | 2017-11-08 | 1 | -78/+98 |
| * | Use %s and __func__ in DPRINTF() to reduce false positive with grep(1). | mpi | 2017-11-06 | 1 | -37/+34 |
| * | Reduces the scope of the NET_LOCK() in sysctl(2) path. | mpi | 2017-10-09 | 1 | -16/+43 |
| * | The IP in IP input function strips the outer header and reinserts | bluhm | 2017-07-05 | 1 | -16/+2 |
| * | When dealing with mbuf pointers passed down as function parameters, | bluhm | 2017-06-19 | 1 | -13/+7 |
| * | Rename ip_local() to ip_deliver() and give it the same parameters | bluhm | 2017-05-28 | 1 | -4/+4 |
| * | Move IPsec forward and local policy check functions to ipsec_input.c | bluhm | 2017-05-22 | 1 | -1/+96 |
| * | Replace remaining splsoftassert(IPL_SOFTNET) by NET_ASSERT_LOCKED(). | mpi | 2017-05-16 | 1 | -3/+3 |
| * | IPsec packets were passed through ip_input() a second time after | bluhm | 2017-05-12 | 1 | -33/+27 |
| * | Instead of printing a debug message at the end of processing, panic | bluhm | 2017-05-12 | 1 | -19/+21 |
| * | IPv6 IPsec transport mode did not work if pf is enabled. The | bluhm | 2017-05-11 | 1 | -1/+27 |
| * | Expand SA_LEN(), there is no benefit for using the macro in the | bluhm | 2017-05-05 | 1 | -3/+3 |
| * | Pass down the address family through the pr_input calls. This | bluhm | 2017-04-14 | 1 | -9/+9 |
| * | Replace bcopy with a simple assignment where both variables are |   dhill | 2017-04-06 | 1 | -4/+3 |
| * | Some refactoring in ip6_input() needed to un-KERNEL_LOCK() the IPv6 | mpi | 2017-02-28 | 1 | -2/+2 |
| * | Remove the ipsec protocol callbacks which all do the same. Implement | bluhm | 2017-02-08 | 1 | -149/+22 |
| * | Error propagation does neither make sense for ip input path nor for | bluhm | 2017-02-07 | 1 | -52/+45 |
| * | Use percpu counters for ip6stat |   jca | 2017-02-05 | 1 | -3/+3 |
| * | Change the IPv4 pr_input function to the way IPv6 is implemented, | bluhm | 2017-01-29 | 1 | -15/+17 |
| * | Reduce the difference between struct protosw and ip6protosw. The | bluhm | 2017-01-26 | 1 | -16/+14 |
| * | Since raw_input() and route_input() are gone from pr_input, we can | bluhm | 2017-01-25 | 1 | -24/+4 |
| * | Assert for IPL_SOFTNET rather than raising SPL recursively. | mpi | 2017-01-23 | 1 | -10/+4 |
| * | Kill recursive splsofnet()/splx() dances. | mpi | 2017-01-20 | 1 | -14/+5 |
| * | Drop non-encapulated ESP packets using a UDP-encapsulating TDB, and add |   vgross | 2016-09-02 | 1 | -1/+11 |
| * | It is time to put inet6 on a diet. Use the flensing knife and cut out | claudio | 2015-09-10 | 1 | -3/+3 |
| * | Kill a couple of if_get()s only needed to increment per-ifp IPv6 stats. | mpi | 2015-09-09 | 1 | -6/+1 |
| * | Store a unique ID, an interface index, rather than a pointer to the | mpi | 2015-06-16 | 1 | -3/+7 |
| * | Move away from using hzto(9); OK dlg |   mikeb | 2015-06-11 | 1 | -10/+5 |
| * | test mbuf pointers against NULL not 0 |   jsg | 2015-05-13 | 1 | -2/+2 |
| * | Stubs and support code for NIC-enabled IPsec bite the dust. | mikeb | 2015-04-17 | 1 | -8/+3 |
| * | make ipsp_address thread safe; ok mpi | mikeb | 2015-04-14 | 1 | -13/+26 |
| * | replace the use of ifqueues for most input queues serviced by netisr | dlg | 2015-04-10 | 1 | -35/+4 |
| * | Remove bits of unfinished IPsec proxy support. DNS' KX records, anyone? | mikeb | 2015-03-26 | 1 | -123/+1 |
| * | Userland (base & ports) was adapted to always include <netinet/in.h> |   deraadt | 2015-01-24 | 1 | -5/+5 |
| * | unifdef INET in net code as a precursor to removing the pretend option. |   tedu | 2014-12-19 | 1 | -17/+1 |
| * | Explicitly include <net/if_var.h> instead of pulling it in <net/if.h>. | mpi | 2014-12-05 | 1 | -1/+2 |
