| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | remove tcp_drain code since it's not longer used; ok henning, feedback thib |   markus | 2008-05-06 | 1 | -3/+3 | |
| | | ||||||
| * | add sysctl entry points into various network layers, in particular to |   deraadt | 2007-12-14 | 1 | -3/+3 | |
| | | | | | provide netstat(1) with data it needs; ok claudio reyk | |||||
| * | Reduce ip6_hdrnestlimit from 50 to 10. Normal IPv6 packets should not have |   claudio | 2007-05-03 | 1 | -2/+2 | |
| | | | | | | more then 10 headers nested. OK deraadt@ henning@ mcbride@ | |||||
| * | introduce sysctl net.inet6.ip6.multicast_mtudisc (for multicast routers). |   itojun | 2006-11-21 | 1 | -1/+2 | |
| | | | | | deraadt ok. manpage nit by jmc. | |||||
| * | Add support for equal-cost multipath IP. |   pascoe | 2006-06-18 | 1 | -1/+2 | |
| | | | | | | | | | | | | | | | To minimise path disruptions, this implements recommendations made in RFC2992 - the hash-threshold mechanism to select paths based on source/destination IP address pairs, and inserts multipath routes in the middle of the route table. To enable multipath distribution, use: sysctl net.inet.ip.multipath=1 and/or: sysctl net.inet6.ip6.multipath=1 testing norby@ ok claudio@ henning@ hshoexer@ | |||||
| * | SZpelling. | pascoe | 2006-06-16 | 1 | -2/+2 | |
| | | ||||||
| * | Do the same thing as for IPv4. Use a sysctl to enable/disable mfrowarding | claudio | 2006-05-27 | 1 | -1/+6 | |
| | | | | | and additionaly make the code part of the MROUTING option. Put it in deraadt@ | |||||
| * | bye bye more compile time knobs, use the sysctl to enable v6 forwarding. |   brad | 2005-10-14 | 1 | -11/+3 | |
| | | | | | ok deraadt@ | |||||
| * | Convert carp(4) to behave more like a regular interface, much in the same |   mcbride | 2004-12-07 | 1 | -2/+2 | |
| | | | | | | | | | style as vlan(4). carp interfaces no longer require the physical interface to be on the same subnet as the carp interface, or even that the physical interface has an adress at all, so CARP can now be used on /30 networks. ok deraadt@ henning@ | |||||
| * | g/c ip6_flow_seq. found by mcbride. mcbride ok | itojun | 2004-10-18 | 1 | -2/+1 | |
| | | ||||||
| * | radix tree with multipath support. from kame. deraadt ok | itojun | 2004-04-25 | 1 | -1/+8 | |
| | | | | | | | | | | | | | | user visible changes: - you can add multiple routes with same key (route add A B then route add A C) - you have to specify gateway address if there are multiple entries on the table (route delete A B, instead of route delete A) kernel change: - radix_node_head has an extra entry - rnh_deladdr takes extra argument TODO: - actually take advantage of multipath (rtalloc -> rtalloc_mpath) | |||||
| * | Add IPv6 support to CARP. | mcbride | 2003-10-31 | 1 | -1/+13 | |
| | | | | | ok deraadt@ | |||||
| * | make net.inet6.ip6.redirect actually work. from kame | itojun | 2003-08-07 | 1 | -6/+2 | |
| | | ||||||
| * | Remove the advertising clause in the UCB license which Berkeley |   millert | 2003-06-02 | 1 | -6/+2 | |
| | | | | | rescinded 22 July 1999. Proofed by myself and Theo. | |||||
| * | pmtu_probe is not used anywhere (it is used in KAME TCP6-only code). | itojun | 2002-11-11 | 1 | -2/+1 | |
| | | | | | From: Krister Walfridsson <cato@df.lth.se> | |||||
| * | set use_deprecated back to 1. sync w/kame | itojun | 2002-08-20 | 1 | -2/+2 | |
| | | ||||||
| * | set default value for use_deprecated to 0, to avoid consequences with ftpd. | itojun | 2002-08-17 | 1 | -2/+2 | |
| | | ||||||
| * | whitespace cleanup | itojun | 2002-06-09 | 1 | -9/+9 | |
| | | ||||||
| * | move IPV6_CHECKSUM processing to ip6_raw_ctloutput(). bunch of KNFs. | itojun | 2002-06-07 | 1 | -2/+2 | |
| | | | | | rip6 stats. sync w/kame | |||||
| * | just for consistency/compatibility, have net.inet6.ip6.v6only sysctl MIB, | itojun | 2002-06-07 | 1 | -1/+2 | |
| | | | | | as well as set/getsockopt(IPV6_V6ONLY). | |||||
| * | move per-interface ip6/icmp6 stat to ifnet->if_afdata. sync w/kame | itojun | 2002-05-29 | 1 | -2/+3 | |
| | | ||||||
| * | limit number of IPv6 fragments (not the fragment queue size) to | itojun | 2002-05-28 | 1 | -1/+2 | |
| | | | | | fight against lots-of-frags DoS attacks. sync w/kame | |||||
| * | correct behavior of IPv4 over IPv6 tunnel (using gif). | itojun | 2002-01-08 | 1 | -17/+17 | |
| | | | | | | http://archives.neohapsis.com/archives/openbsd/2001-09/0165.html From: Alexander Yurchenko <grange@rt.mipt.ru> | |||||
| * | remove IPCOMP option. deraadt@ ok. |   jjbg | 2001-08-08 | 1 | -3/+1 | |
| | | ||||||
| * | IPComp support. angelos@ ok. | jjbg | 2001-07-05 | 1 | -4/+4 | |
| | | ||||||
| * | No need for net/net_osdep.h |   angelos | 2001-06-09 | 1 | -3/+1 | |
| | | ||||||
| * | recover old acecept(2) behavior (no ECONNABORTED) for unix domain socket. | itojun | 2001-05-25 | 1 | -6/+6 | |
| | | | | | | it is to be friendly with postfix daemon-to-daemon communication (not 100% sure if which behavior is correct, specwise). patch similar to netbsd. | |||||
| * | Move offsetof define into sys/param.h |   csapuntz | 2001-04-06 | 1 | -3/+1 | |
| | | ||||||
| * | nuke #ifdef TCP6 (no longer supported). | itojun | 2000-12-11 | 1 | -85/+1 | |
| | | | | | | | | validate ICMPv6 too big messages (pmtud) based on pcb. we accept certain amount of non-validated ones, as IPv6 mandates ICMPv6 (so even for traffic from unconnected pcb, we need pmtud). sync with kame | |||||
| * | little bit of sync with kame ($KAME, s/u_char/u_int8_t/) | itojun | 2000-10-10 | 1 | -2/+2 | |
| | | ||||||
| * | do not call tcp_init twice on dualstack machine | itojun | 2000-10-10 | 1 | -3/+3 | |
| | | ||||||
| * | - more icmp6/ip6 stats. | itojun | 2000-07-06 | 1 | -4/+6 | |
| | | | | | | | | | | - protect IPv6 ND from being hosed (due to neighbor unreachability detection hint) by wrong tcp traffic. still not sure if there's real attack, but it is good to be cautious. - avoid bitfield for router renumbering header decl. - implement packet-per-sec limitation for icmp6 errors, turn interval limit off (it is not very useful due to unix timer resolution). | |||||
| * | sync with KAME udp6_output(). udp output logic is very different between | itojun | 2000-06-18 | 1 | -2/+2 | |
| | | | | | | | | IPv4/v6 so the separation should make more sense. TODO: remove IPv6 case from udp_output() TODO: remove/comment out/#if 0 IPv4 mapped address cases | |||||
| * | net.inet.ip.gif_ttl (and IPv6 counterpart) is never used. | itojun | 2000-05-25 | 1 | -6/+1 | |
| | | | | | enforce type checking on IN6_ARE_ADDR_EQUAL. | |||||
| * | use ratecheck(9) for ICMPv6 rate limitation. sync with netbsd-current. | itojun | 2000-05-22 | 1 | -2/+2 | |
| | | ||||||
| * | - check raw socket icmp6 filter only if the packet is icmp6. | itojun | 2000-02-28 | 1 | -2/+2 | |
| | | | | | | | - allow setting raw socket icmp6 filter only if it is IPPROTO_ICMPV6 socket. (cmetz may object about above two items...) - add rip6_ctlinput, to flush cached router properly on redirects. | |||||
| * | bring in recent KAME changes (only important and stable ones, as usual). | itojun | 2000-02-28 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | | | | | | - remove net.inet6.ip6.nd6_proxyall. introduce proxy NDP code works just like "arp -s". - revise source address selection. be more careful about use of yet-to-be-valid addresses as source. - as router, transmit ICMP6_DST_UNREACH_BEYONDSCOPE against out-of-scope packet forwarding attempt. - path MTU discovery takes care of routing header properly. - be more strict about mbuf chain parsing. - nuke xxCTL_VARS #define, they are for BSDI. - disable SIOCSIFDSTADDR_IN6/SIOCSIFNETMASK_IN6 ioctl, they do not fit IPv6 model where multiple address on interface is normal. (kernel side supports them for a while for backward compat, the support will be nuked shortly) - introduce "default outgoing interface" (for spec conformance in very rare case) | |||||
| * | fix include file path related to ip6. | itojun | 2000-02-07 | 1 | -3/+3 | |
| | | ||||||
| * | remove never-visited code (#ifdef MAPPED_ADDR_ENABLED) | itojun | 2000-02-02 | 1 | -5/+1 | |
| | | ||||||
| * | ip4_input -> ip4_input6, and fix typo in comment | angelos | 2000-01-23 | 1 | -3/+3 | |
| | | ||||||
| * | Rename the ip4_* routines to ipip_*, make it so GIF tunnels are not | angelos | 2000-01-21 | 1 | -11/+11 | |
| | | | | | | affected by net.inet.ipip.allow (the sysctl formerly known as net.inet.ip4.allow), rename the VIF ipip_input to ipip_mroute_input. | |||||
| * | We do need netinet/ip_ip4.h after all... | angelos | 2000-01-13 | 1 | -1/+2 | |
| | | ||||||
| * | Align. | angelos | 2000-01-13 | 1 | -3/+3 | |
| | | ||||||
| * | Introduce ip4_input6() with the correct prototype... | angelos | 2000-01-13 | 1 | -7/+3 | |
| | | ||||||
| * | Add include file fixing non-gif inet6 kernels. | angelos | 2000-01-13 | 1 | -1/+2 | |
| | | ||||||
| * | Use netinet/ip_ip4.c routines. | angelos | 2000-01-12 | 1 | -3/+20 | |
| | | ||||||
| * | Replace references to ipsec6_sysctl (code is not yet compiled in) | angelos | 2000-01-02 | 1 | -3/+5 | |
| | | ||||||
| * | implement net.inet6.icmp6.nodeinfo sysctl, which disables | itojun | 2000-01-02 | 1 | -1/+2 | |
| | | | | | | | ICMPv6 node information query (and FQDN query - old variant). kame repository has the change as well. | |||||
| * | Remove remaining unnecessary ifdefs (itojun will hate me for this :-) | angelos | 1999-12-10 | 1 | -344/+1 | |
| | | ||||||
| * | Add RCS tags, remove unused header files and code, remove a few | angelos | 1999-12-10 | 1 | -0/+2 | |
| | | | | | unnecessary ifdefs... | |||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |