aboutsummaryrefslogtreecommitdiff
path: root/sys/netipsec/ipsec.c
Commit message (Expand)AuthorAgeFilesLines
* Overhaul if_enc(4) and make it loadable in run-time.Andrey V. Elsukov2015-11-251-0/+30
* Turning on IPSEC used to introduce a slight amount of performanceGeorge V. Neville-Neil2015-10-271-0/+6
* Reduce overhead of IPSEC for traffic generated from hostErmal Luçi2015-07-031-0/+6
* Make ipsec_in_reject() static. We use ipsec[46]_in_reject() instead.Andrey V. Elsukov2015-04-271-1/+2
* Change ipsec_address() and ipsec_logsastr() functions to take twoAndrey V. Elsukov2015-04-181-45/+17
* Rename ip4_def_policy variable to def_policy. It is used by both IPv4 andAndrey V. Elsukov2014-12-241-16/+11
* Treat errors when retrieving security policy as policy violation.Andrey V. Elsukov2014-12-111-2/+4
* Initialize error variable.Andrey V. Elsukov2014-12-111-0/+1
* Remove flag/flags argument from the following functions:Andrey V. Elsukov2014-12-111-20/+10
* Remove __P() macro.Andrey V. Elsukov2014-12-031-9/+9
* Remove route chaching support from ipsec code. It isn't used for some time.Andrey V. Elsukov2014-12-021-1/+0
* Remove SYSCTL_VNET_* macros, and simply put CTLFLAG_VNET where needed.Gleb Smirnoff2014-11-071-40/+40
* Remove _IP_VHL* macros and related ifdefs.Andrey V. Elsukov2014-04-161-12/+0
* The r48589 promised to remove implicit inclusion of if_var.h soon. PrepareGleb Smirnoff2013-10-261-0/+1
* Migrate structs ahstat, espstat, ipcompstat, ipipstat, pfkeystat,Andrey V. Elsukov2013-07-091-12/+18
* Use IPSECSTAT_INC() and IPSEC6STAT_INC() macros for ipsec statisticsAndrey V. Elsukov2013-06-201-4/+4
* Switch the entire IPv4 stack to keep the IP packet headerGleb Smirnoff2012-10-221-3/+2
* Announce both IPsec and UDP Encap (NAT-T) if available forBjoern A. Zeeb2010-10-301-0/+5
* MFP4: @176978-176982, 176984, 176990-176994, 177441Bjoern A. Zeeb2010-04-291-0/+1
* Fix a logic error in ipsec code that extractsErmal Luçi2010-04-021-1/+1
* Merge the remainder of kern_vimage.c and vimage.h into vnet.c andRobert Watson2009-08-011-1/+0
* Introduce and use a sysinit-based initialization scheme for virtualRobert Watson2009-07-231-25/+3
* Garbage collect vnet module registrations that have neither constructorsRobert Watson2009-07-201-1/+0
* Build on Jeff Roberson's linker-set based dynamic per-CPU allocatorRobert Watson2009-07-141-167/+77
* Properly hide IPv4 only variables and functions under #ifdef INET.Bjoern A. Zeeb2009-06-101-0/+2
* Introduce an infrastructure for dismantling vnet instances.Marko Zec2009-06-081-2/+18
* Add sysctls to toggle the behaviour of the (former) IPSEC_FILTERTUNNELBjoern A. Zeeb2009-05-231-0/+16
* Permit buiding kernels with options VIMAGE, restricted to only a singleMarko Zec2009-04-301-0/+1
* Introduce vnet module registration / initialization framework withMarko Zec2009-04-111-0/+14
* First pass at separating per-vnet initializer functionsMarko Zec2009-04-061-0/+12
* Try to remove/assimilate as much of formerly IPv4/6 specificBjoern A. Zeeb2009-02-081-214/+56
* Like in the rest of the file and the network stack use inp asBjoern A. Zeeb2008-12-271-30/+30
* Non-functional (style) changes:Bjoern A. Zeeb2008-12-271-206/+208
* Convert function definitions to constantly use ANSI-styleBjoern A. Zeeb2008-12-271-98/+34
* Rewrite ipsec6_setspidx_inpcb() to match the logic in theBjoern A. Zeeb2008-12-271-21/+11
* For consistency with ipsec4_setspidx_inpcb() rename file local functionBjoern A. Zeeb2008-12-271-3/+3
* Change the in6p variable names to inp to be able to diffBjoern A. Zeeb2008-12-271-16/+16
* Make ipsec_getpolicybysock() static and no longer export it. It has notBjoern A. Zeeb2008-12-271-6/+2
* Another step assimilating IPv[46] PCB code - directly useBjoern A. Zeeb2008-12-151-20/+20
* Conditionally compile out V_ globals while instantiating the appropriateMarko Zec2008-12-101-0/+6
* Unify ipsec[46]_delete_pcbpolicy in ipsec_delete_pcbpolicy.Bjoern A. Zeeb2008-11-271-22/+1
* Merge more of currently non-functional (i.e. resolving toMarko Zec2008-11-261-1/+1
* Unbreak the build without INET6.Bjoern A. Zeeb2008-11-251-0/+2
* Change the initialization methodology for global variables scheduledMarko Zec2008-11-191-22/+57
* Step 1.5 of importing the network stack virtualization infrastructureMarko Zec2008-10-021-52/+86
* Commit step 1 of the vimage project, (network stack)Bjoern A. Zeeb2008-08-171-15/+16
* Fill in a few sysctl descriptions.Tom Rhodes2008-07-261-24/+29
* Document a few sysctls. While here, remove dead codeTom Rhodes2008-07-201-26/+24
* In addition to the ipsec_osdep.h removal a week ago, now also eliminateBjoern A. Zeeb2008-05-241-4/+0
* In keeping with style(9)'s recommendations on macros, use a ';'Robert Watson2008-03-161-1/+1