| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Remove dead code from #if 0: we do not have an ipsrcchk_rt anywhere else. |   bluhm | 2012-01-05 | 1 | -5/+1 | |
| | | | | | from FreeBSD; ok henning@ | |||||
| * | Replace the hand-crafted queue for fragmented IPv6 packets with TAILQ. | bluhm | 2012-01-05 | 1 | -53/+26 | |
| | | | | | ok henning@ | |||||
| * | Fix potential null dereference. |   chl | 2011-05-02 | 1 | -3/+5 | |
| | | | | | | | Found by LLVM/Clang Static Analyzer. ok claudio@ henning@ | |||||
| * | Kill redundant offsetof definitions; ok deraadt henning sthen thib |   stsp | 2011-04-03 | 1 | -5/+1 | |
| | | ||||||
| * | Extract the new function frag6_deletefraghdr() from frag6_input() | bluhm | 2011-03-06 | 1 | -18/+31 | |
| | | | | | | to make it reusable by pf. No functional change. ok henning@, claudio@ | |||||
| * | In frag6_input() there was an mbuf length calculation error. If | bluhm | 2011-01-13 | 1 | -6/+5 | |
| | | | | | | | | | you want to move "offset" bytes forward by "sizeof(struct ip6_frag)" bytes within an mbuf, you must have at least "offset + sizeof(struct ip6_frag)" bytes space in that mbuf. Fix from KAME, FreeBSD also has it. ok claudio@ markus@ | |||||
| * | Start cleaning up the mess called rtalloc*. Kill rtalloc2, make rtalloc1 |   claudio | 2010-05-07 | 1 | -14/+9 | |
| | | | | | | | | | accept flags for report and nocloning. Move the rtableid into struct route (with a minor twist for now) and make a few more codepathes rdomain aware. Appart from the pf.c and route.c bits the diff is mostly mechanical. More to come... OK michele, henning | |||||
| * | Destatic and ansify. |   jsing | 2010-02-08 | 1 | -9/+9 | |
| | | | | | ok claudio@ naddy@ | |||||
| * | - obvious typo in comment, from holger mikolon |   jasper | 2009-12-27 | 1 | -2/+2 | |
| | | ||||||
| * | When accessing cached routes make sure the route is actually still valid. | claudio | 2008-11-23 | 1 | -3/+2 | |
| | | | | | | | | | Before accessing a ro_rt make sure the route is either freshly allocated or RTF_UP is set. If not ro_rt should be freed and reallocated or at least no info from the ro_rt should be considered valid. This seems to solve the crashes seen by Felipe Alfaro Solana. some sort of OK dlg@ | |||||
| * | ANSIfy to sync with KAME. From Karl Sjodahl <dunceor@gmail.com>. |   mcbride | 2008-06-11 | 1 | -14/+7 | |
| | | | | | ok todd deraadt naddy bluhm | |||||
| * | take advantage of M_ZERO |   hshoexer | 2007-12-09 | 1 | -7/+3 | |
| | | | | | ok claudio gilles | |||||
| * | framgent -> fragment |   ray | 2007-05-01 | 1 | -2/+2 | |
| | | ||||||
| * | Add support for equal-cost multipath IP. |   pascoe | 2006-06-18 | 1 | -2/+2 | |
| | | | | | | | | | | | | | | | To minimise path disruptions, this implements recommendations made in RFC2992 - the hash-threshold mechanism to select paths based on source/destination IP address pairs, and inserts multipath routes in the middle of the route table. To enable multipath distribution, use: sysctl net.inet.ip.multipath=1 and/or: sysctl net.inet6.ip6.multipath=1 testing norby@ ok claudio@ henning@ hshoexer@ | |||||
| * | splimp -> splvm. mbuf allocation here. |   brad | 2005-11-20 | 1 | -3/+4 | |
| | | | | | ok henning@ | |||||
| * | use random number generator to generate IPv6 fragment ID/flowlabel. |   itojun | 2003-10-01 | 1 | -2/+2 | |
| | | | | | cleanup IPv6 flowlabel handling. deraadt ok | |||||
| * | make PULLDOWN_TEST codepath the default (has been default for a long time). | itojun | 2003-05-14 | 1 | -6/+1 | |
| | | | | | markus ok | |||||
| * | fix pointer signedness mixup. sync w/kame | itojun | 2002-09-11 | 1 | -2/+2 | |
| | | ||||||
| * | KNF - return is not a function. sync w/kame | itojun | 2002-09-11 | 1 | -3/+3 | |
| | | ||||||
| * | splnet -> splsoftnet where appropriate | itojun | 2002-06-08 | 1 | -2/+2 | |
| | | ||||||
| * | limit number of IPv6 fragments (not the fragment queue size) to | itojun | 2002-05-28 | 1 | -17/+36 | |
| | | | | | fight against lots-of-frags DoS attacks. sync w/kame | |||||
| * | kill __P |   deraadt | 2002-05-27 | 1 | -3/+3 | |
| | | ||||||
| * | bring in ECN support from KAME. |   kjc | 2002-05-16 | 1 | -1/+24 | |
| | | | | | | | | | | | | | it consists of - ECN support in TCP - tunnel-egress and fragment reassembly rules in layer-3 not to lose congestion info at tunnel-egress and fragment reassembly to enable ECN in TCP, build a kernel with TCP_ECN, and then, turn it on by "sysctl -w net.inet.tcp.ecn=1". ok deraadt@ | |||||
| * | have a real lock around IPv6 reassembly. | itojun | 2002-03-15 | 1 | -13/+78 | |
| | | ||||||
| * | First round of __P removal in sys |   millert | 2002-03-14 | 1 | -6/+6 | |
| | | ||||||
| * | No need for net/net_osdep.h |   angelos | 2001-06-09 | 1 | -3/+1 | |
| | | ||||||
| * | fix memory leak on ipv6 reass failure. sync with kame | itojun | 2001-05-17 | 1 | -2/+9 | |
| | | ||||||
| * | correct behavior when ip6 reass queue reaches the upper limit. | itojun | 2001-02-22 | 1 | -9/+9 | |
| | | ||||||
| * | set frag6_doing_reass while doing reass, to help frag6_drain. | itojun | 2001-02-16 | 1 | -7/+9 | |
| | | ||||||
| * | sync whitespace/comment with kame. to help merge tasks | itojun | 2001-02-16 | 1 | -8/+9 | |
| | | ||||||
| * | fix include file path related to ip6. | itojun | 2000-02-07 | 1 | -3/+3 | |
| | | ||||||
| * | make IPv6 reass work on alpha. NetBSD PR 9340. | itojun | 2000-02-04 | 1 | -49/+81 | |
| | | ||||||
| * | pull in arc4random() prototype | deraadt | 2000-01-08 | 1 | -1/+3 | |
| | | ||||||
| * | use arc4random() instead of random for two reasons. | deraadt | 2000-01-08 | 1 | -9/+2 | |
| | | | | | | | 1) on some architectures, random() should only be used by the scheduler (ie. statintr() because it is uniformly distributed 2) arc4random() is actually strong, random() is not at all | |||||
| * | Remove remaining unnecessary ifdefs (itojun will hate me for this :-) | angelos | 1999-12-10 | 1 | -17/+3 | |
| | | ||||||
| * | bring in KAME IPv6 code, dated 19991208. | itojun | 1999-12-08 | 1 | -0/+668 | |
| replaces NRL IPv6 layer. reuses NRL pcb layer. no IPsec-on-v6 support. see sys/netinet6/{TODO,IMPLEMENTATION} for more details. GENERIC configuration should work fine as before. GENERIC.v6 works fine as well, but you'll need KAME userland tools to play with IPv6 (will be bringed into soon). | ||||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |