| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Add support for autmatically moving traffic between rdomains on ipsec(4) |   tobhe | 2020-04-23 | 1 | -1/+3 |
| * | Initialize the TDB to NULL in ipsec_common_input() and |   mestre | 2018-09-14 | 1 | -2/+2 |
| * | Add per-TDB counters and a new SADB extension to export them to |   mpi | 2018-08-28 | 1 | -5/+12 |
| * | Introduce ipsec_output_cb() to merge duplicate code and account for | mpi | 2018-07-12 | 1 | -1/+83 |
| * | Cleanup IPsec output error handling with consistent goto drop. |   bluhm | 2018-06-04 | 1 | -45/+61 |
| * | When walking the IPv6 header chain in IPsec output, check that the | bluhm | 2018-05-14 | 1 | -2/+10 |
| * | Make {ah,esp,ipcomp}stat use percpu counters. |   visa | 2017-11-08 | 1 | -3/+3 |
| * | Use %s and __func__ in DPRINTF() to reduce false positive with grep(1). | mpi | 2017-11-06 | 1 | -2/+2 |
| * | The function name ip4_input() is confusing as it also handles IPv6 | bluhm | 2017-05-18 | 1 | -2/+2 |
| * | Replace remaining splsoftassert(IPL_SOFTNET) by NET_ASSERT_LOCKED(). | mpi | 2017-05-16 | 1 | -2/+2 |
| * | Replace bcopy with a simple assignment where both variables are |   dhill | 2017-04-06 | 1 | -2/+2 |
| * | Kill recursive splsofnet()/splx() dances. | mpi | 2017-01-20 | 1 | -5/+2 |
| * | Rename 'i' to 'hlen' for greater readability; ok millert, naddy |   mikeb | 2016-10-11 | 1 | -19/+20 |
| * | avoid extensive mbuf allocation for IPsec by replacing m_inject(4) |   markus | 2016-09-13 | 1 | -5/+4 |
| * | When IPsec UDP encapsulation is used for IPv6, the stack should | mikeb | 2016-02-28 | 1 | -4/+25 |
| * | Kill yet another argument to functions in IPv6. This time ip6_output's |   claudio | 2015-09-11 | 1 | -2/+2 |
| * | m_freem() can handle NULL, do not check for this condition beforehands. |   deraadt | 2015-07-15 | 1 | -5/+2 |
| * | Move away from using hzto(9); OK dlg | mikeb | 2015-06-11 | 1 | -12/+5 |
| * | Stubs and support code for NIC-enabled IPsec bite the dust. | mikeb | 2015-04-17 | 1 | -9/+3 |
| * | make ipsp_address thread safe; ok mpi | mikeb | 2015-04-14 | 1 | -6/+11 |
| * | Userland (base & ports) was adapted to always include <netinet/in.h> | deraadt | 2015-01-24 | 1 | -7/+5 |
| * | unifdef INET in net code as a precursor to removing the pretend option. |   tedu | 2014-12-19 | 1 | -30/+1 |
| * | remove uneeded route.h includes |   jsg | 2014-09-08 | 1 | -2/+1 |
| * | Fewer <netinet/in_systm.h> ! | mpi | 2014-07-22 | 1 | -2/+1 |
| * | ip_output() using varargs always struck me as bizarre, esp since it's only |   henning | 2014-04-21 | 1 | -2/+2 |
| * | we'll do fine without casting NULL to struct foo * / void * | henning | 2014-04-21 | 1 | -3/+3 |
| * | Remove the number of in6_var.h inclusions by moving some functions and | mpi | 2013-10-24 | 1 | -2/+1 |
| * | unbreak PMTU-discovery for AES-GCM; ok mikeb@ | markus | 2013-08-03 | 1 | -2/+2 |
| * | Remove various external variable declaration from sources files and | mpi | 2013-04-10 | 1 | -3/+1 |
| * | code that calls timeout functions should include timeout.h | tedu | 2013-03-28 | 1 | -1/+2 |
| * | spltdb() was really just #define'd to be splsoftnet(); replace the former |   blambert | 2012-09-20 | 1 | -2/+2 |
| * | remove the SADB_X_SAFLAGS_{HALFIV,RANDOMPADDING,NOREPLAY} pfkey-API (not set | markus | 2012-09-18 | 1 | -9/+3 |
| * | The function pf_tag_packet() never fails. Remove a redundant check | bluhm | 2011-03-05 | 1 | -3/+2 |
| * | Add support for using IPsec in multiple rdomains. |   reyk | 2010-07-09 | 1 | -2/+4 |
| * | Fix two bugs in IPsec/HMAC-SHA2: | markus | 2010-01-10 | 1 | -2/+2 |
| * | we need to call pf_pkt_addr_changed here too. found by david | henning | 2008-08-26 | 1 | -1/+2 |
| * | Assign the ip and ip6 pointers in ipsp_process_packet() only if a | bluhm | 2008-08-21 | 1 | -8/+11 |
| * | apply the "skip ipsec if there are no flows" speedup diff to IPv6 too. | henning | 2007-06-01 | 1 | -2/+2 |
| * | double pf performance. | henning | 2007-05-28 | 1 | -2/+2 |
| * | - AH: when computing crypto checksum for output, massage source-routing |   itojun | 2007-02-08 | 1 | -1/+62 |
| * | TDBF_USEDTUNNEL flag manipulation was inside #ifdef INET. it applies | itojun | 2006-12-19 | 1 | -2/+2 |
| * | do not install pmtu routes for transport mode SAs, as they do not | markus | 2006-12-05 | 1 | -1/+5 |
| * | add support to tag ipsec traffic belonging to specific IKE-initiated | reyk | 2006-11-24 | 1 | -1/+13 |
| * | handle PMTU for ipip SAs, too; ok hshoexer, cloder | markus | 2005-04-12 | 1 | -1/+5 |
| * | pmtu support for udpencap; ok hshoexer, ho | markus | 2004-09-24 | 1 | -1/+3 |
| * | Default enable udpencap. Add 'disable' sysctl to sysctl.conf. markus@ ok. |   ho | 2004-06-26 | 1 | -2/+2 |
| * | First step towards more sane time handling in the kernel -- this changes |   tholo | 2004-06-21 | 1 | -8/+4 |
| * | don't send UDP encapsulated packets w/o UDP header if encap is disabled; ok ho@ | markus | 2004-06-21 | 1 | -3/+6 |
| * | UDP encapsulation for ESP in transport mode (draft-ietf-ipsec-udp-encaps-XX.txt) | markus | 2003-12-02 | 1 | -1/+30 |
| * | do not flip ip_len/ip_off in netinet stack. deraadt ok. | itojun | 2003-07-09 | 1 | -8/+3 |
