aboutsummaryrefslogtreecommitdiff
path: root/sys/netipsec
Commit message (Expand)AuthorAgeFilesLines
* Use IPv4 statistics in ipsec4_process_packet() rather than the IPv6Bjoern A. Zeeb2014-05-281-2/+2
* Fixed IPv4-in-IPv6 and IPv6-in-IPv4 IPsec tunnels.VANHULLEBUS Yvan2014-05-284-338/+207
* Only do a ports check if this is a NAT-T SA. Otherwise otherBjoern A. Zeeb2014-05-241-6/+20
* Remove _IP_VHL* macros and related ifdefs.Andrey V. Elsukov2014-04-162-24/+0
* The check for local address spoofing lacks ifaddr locking.Andrey V. Elsukov2014-04-041-44/+13
* Remove unused variable.Andrey V. Elsukov2014-04-041-3/+0
* Remove dead code.Andrey V. Elsukov2014-04-041-13/+0
* Remove more constants related to static sysctl nodes. The MAXID constantsJohn Baldwin2014-02-252-5/+0
* Initialize prot variable.Andrey V. Elsukov2013-11-111-0/+1
* Provide includes that are needed in these files, and before were readGleb Smirnoff2013-10-263-1/+5
* The r48589 promised to remove implicit inclusion of if_var.h soon. PrepareGleb Smirnoff2013-10-265-1/+6
* Remove most of the remaining sysctl name list macros. They were onlyJohn Baldwin2013-08-262-50/+0
* Remove the large part of struct ipsecstat. Only few fields of thisAndrey V. Elsukov2013-07-231-30/+4
* Migrate structs ahstat, espstat, ipcompstat, ipipstat, pfkeystat,Andrey V. Elsukov2013-07-0913-55/+94
* Prepare network statistics structures for migration to PCPU counters.Andrey V. Elsukov2013-07-097-135/+131
* Use corresponding macros to update statistics for AH, ESP, IPIP, IPCOMP,Andrey V. Elsukov2013-06-2013-202/+194
* Use IPSECSTAT_INC() and IPSEC6STAT_INC() macros for ipsec statisticsAndrey V. Elsukov2013-06-205-14/+16
* Use IP6STAT_INC/IP6STAT_DEC macros to update ip6 stats.Andrey V. Elsukov2013-04-092-3/+3
* Use m_get2() + m_align() instead of hand made key_alloc_mbuf(). CodeGleb Smirnoff2013-03-151-104/+50
* Mechanically substitute flags from historic mbuf allocator withGleb Smirnoff2012-12-055-33/+33
* Do not reduce ip_len by size of IP header in the ip_input()Gleb Smirnoff2012-10-231-3/+0
* - Fix one more miss from r241913.Gleb Smirnoff2012-10-231-2/+4
* Couple of changes missed from r241913, which convertedGleb Smirnoff2012-10-222-23/+9
* Switch the entire IPv4 stack to keep the IP packet headerGleb Smirnoff2012-10-221-3/+2
* Mechanically remove the last stray remains of spl* calls from net*/*.Andre Oppermann2012-10-181-6/+0
* Add missing breakKevin Lo2012-09-181-0/+1
* In NAT-T transport mode, allow a client to open a new connection just afterVANHULLEBUS Yvan2012-09-121-3/+5
* Merge the projects/pf/head branch, that was worked on for last six months,Gleb Smirnoff2012-09-083-6/+0
* Unexpand a couple of TAILQ_FOREACH()s.John Baldwin2012-08-171-2/+1
* Fix a bug introduced in r221129 that leads to a panic wen using bundledBjoern A. Zeeb2012-07-221-2/+1
* Add multi-FIB IPv6 support to the core network stack supplementingBjoern A. Zeeb2012-02-031-1/+1
* Clean up some #endif comments removing from short sections. Add #endifBjoern A. Zeeb2012-01-221-1/+1
* Remove unused 'plen' variable.Pawel Jakub Dawidek2011-11-261-2/+1
* The esp_max_ivlen global variable is not needed, we can just usePawel Jakub Dawidek2011-11-261-16/+1
* malloc(M_WAITOK) never fails, so there is no need to check for NULL.Pawel Jakub Dawidek2011-11-261-4/+0
* Eliminate 'err' variable and just use existing 'error'.Pawel Jakub Dawidek2011-11-262-6/+5
* Simplify code a bit.Pawel Jakub Dawidek2011-11-262-12/+6
* There is no need to virtualize esp_max_ivlen.Pawel Jakub Dawidek2011-11-261-6/+5
* Add missing va_end() in an error case to clean up after va_start()Christian Brueffer2011-10-071-0/+1
* Update packet filter (pf) code to OpenBSD 4.5.Bjoern A. Zeeb2011-06-283-0/+6
* Release SP's refcount in key_get_spdbyid().VANHULLEBUS Yvan2011-05-091-0/+1
* Make IPsec compile without INET adding appropriate #ifdef checks.Bjoern A. Zeeb2011-04-277-67/+112
* Do not allow recursive RFC3173 IPComp payload.Bjoern A. Zeeb2011-04-011-0/+21
* Optimisation in IPSEC(4):Fabien Thomas2011-03-317-75/+69
* Fix two SA refcount:Fabien Thomas2011-03-312-1/+1
* Fixed IPsec's HMAC_SHA256-512 support to be RFC4868 compliant.VANHULLEBUS Yvan2011-02-184-13/+84
* After some off-list discussion, revert a number of changes to theDimitry Andric2010-11-223-20/+20
* Apply the STATIC_VNET_DEFINE and STATIC_DPCPU_DEFINE macros throughoutDimitry Andric2010-11-143-20/+20
* Announce both IPsec and UDP Encap (NAT-T) if available forBjoern A. Zeeb2010-10-301-0/+5
* Fix typo in comment.Thomas Quinot2010-10-251-1/+1