aboutsummaryrefslogtreecommitdiff
path: root/sys/netipsec/ipsec_output.c
Commit message (Expand)AuthorAgeFilesLines
* sys: general adoption of SPDX licensing ID tags.Pedro F. Giffuni2017-11-271-0/+2
* Fix the regression introduced in r275710.Andrey V. Elsukov2017-08-211-2/+2
* Add inpcb pointer to struct ipsec_ctx_data and pass it to the pfil hookAndrey V. Elsukov2017-07-311-10/+14
* Disable IPsec debugging code by default when IPSEC_DEBUG kernel optionAndrey V. Elsukov2017-05-291-14/+6
* Fix possible double releasing for SA and SP references.Andrey V. Elsukov2017-05-231-8/+0
* Merge projects/ipsec into head/.Andrey V. Elsukov2017-02-061-448/+684
* sys/net*: minor spelling fixes.Pedro F. Giffuni2016-05-031-1/+1
* Fix handling of net.inet.ipsec.dfbit=2 variable.Andrey V. Elsukov2016-03-181-1/+1
* Overhaul if_enc(4) and make it loadable in run-time.Andrey V. Elsukov2015-11-251-42/+19
* Take extra reference to security policy before calling crypto_dispatch().Andrey V. Elsukov2015-09-301-14/+2
* Correct IPSec SA statistic keepingErmal Luçi2015-07-301-1/+2
* Fix the comment. We will not do SPD lookup again, becauseAndrey V. Elsukov2015-04-281-2/+1
* Since PFIL can change mbuf pointer, we should update pointers afterAndrey V. Elsukov2015-04-281-0/+2
* Fix possible use after free due to security policy deletion.Andrey V. Elsukov2015-04-271-2/+15
* Change ipsec_address() and ipsec_logsastr() functions to take twoAndrey V. Elsukov2015-04-181-10/+11
* Fix handling of scoped IPv6 addresses in IPSec code.Andrey V. Elsukov2015-04-181-0/+7
* Remove xform_ipip.c and code related to XF_IP4.Andrey V. Elsukov2015-04-181-92/+128
* Remove flags and tunalready arguments from ipsec4_process_packet()Andrey V. Elsukov2014-12-111-92/+53
* Remove route chaching support from ipsec code. It isn't used for some time.Andrey V. Elsukov2014-12-021-1/+0
* Count statistics for the specific address family.Andrey V. Elsukov2014-11-131-1/+2
* ipsec6_process_packet is called before ip6_output fixes ip6_plen.Andrey V. Elsukov2014-11-121-5/+2
* Fix ips_out_nosa errors accounting.Andrey V. Elsukov2014-11-121-1/+10
* Mechanically convert to if_inc_counter().Gleb Smirnoff2014-09-191-4/+4
* The assumption in ipsec4_process_packet() that the payload may beMarko Zec2014-07-011-3/+5
* Use IPv4 statistics in ipsec4_process_packet() rather than the IPv6Bjoern A. Zeeb2014-05-281-2/+2
* Fixed IPv4-in-IPv6 and IPv6-in-IPv4 IPsec tunnels.VANHULLEBUS Yvan2014-05-281-269/+112
* Remove _IP_VHL* macros and related ifdefs.Andrey V. Elsukov2014-04-161-12/+0
* The r48589 promised to remove implicit inclusion of if_var.h soon. PrepareGleb Smirnoff2013-10-261-0/+1
* Use corresponding macros to update statistics for AH, ESP, IPIP, IPCOMP,Andrey V. Elsukov2013-06-201-6/+10
* Use IPSECSTAT_INC() and IPSEC6STAT_INC() macros for ipsec statisticsAndrey V. Elsukov2013-06-201-6/+6
* Use IP6STAT_INC/IP6STAT_DEC macros to update ip6 stats.Andrey V. Elsukov2013-04-091-1/+1
* Mechanically substitute flags from historic mbuf allocator withGleb Smirnoff2012-12-051-2/+2
* Couple of changes missed from r241913, which convertedGleb Smirnoff2012-10-221-6/+2
* Merge the projects/pf/head branch, that was worked on for last six months,Gleb Smirnoff2012-09-081-2/+0
* Fix a bug introduced in r221129 that leads to a panic wen using bundledBjoern A. Zeeb2012-07-221-2/+1
* Add multi-FIB IPv6 support to the core network stack supplementingBjoern A. Zeeb2012-02-031-1/+1
* Update packet filter (pf) code to OpenBSD 4.5.Bjoern A. Zeeb2011-06-281-0/+2
* Make IPsec compile without INET adding appropriate #ifdef checks.Bjoern A. Zeeb2011-04-271-1/+23
* Fix two SA refcount:Fabien Thomas2011-03-311-1/+0
* Make the IPsec SADB embedded route cache a union to be able to hold both theBjoern A. Zeeb2010-10-231-1/+2
* Remove dead code:Bjoern A. Zeeb2010-10-141-3/+1
* Style: make the asterisk go with the variable name, not the type.Bjoern A. Zeeb2010-10-141-1/+1
* Merge the remainder of kern_vimage.c and vimage.h into vnet.c andRobert Watson2009-08-011-1/+0
* Build on Jeff Roberson's linker-set based dynamic per-CPU allocatorRobert Watson2009-07-141-8/+1
* Added support for NAT-Traversal (RFC 3948) in IPsec stack.VANHULLEBUS Yvan2009-06-121-0/+55
* Use NULL rather than 0 when comparing pointers.Bjoern A. Zeeb2009-01-301-2/+2
* Rather than using hidden includes (with cicular dependencies),Bjoern A. Zeeb2008-12-021-0/+1
* Step 1.5 of importing the network stack virtualization infrastructureMarko Zec2008-10-021-0/+7
* Commit step 1 of the vimage project, (network stack)Bjoern A. Zeeb2008-08-171-17/+18
* Increase statistic counters for enc0 interface when enabledVANHULLEBUS Yvan2008-08-121-0/+11