diff options
| author | Renato Botelho <renato@netgate.com> | 2015-08-17 13:53:28 -0300 |
|---|---|---|
| committer | Renato Botelho <renato@netgate.com> | 2015-08-17 13:53:28 -0300 |
| commit | 9ed545f35cdf6da23726dadeb0e999d0d81e62eb (patch) | |
| tree | 9eecf2fcc864b8614fce635542f12c0587594d7c /sys/netipsec/ipsec.c | |
| parent | d3b775b3db2819bebcac765dca33db7f8f5143c7 (diff) | |
| download | FreeBSD-src-9ed545f35cdf6da23726dadeb0e999d0d81e62eb.zip FreeBSD-src-9ed545f35cdf6da23726dadeb0e999d0d81e62eb.tar.gz | |
Importing pfSense patch ipsec_direct_dispatch.diff
Diffstat (limited to 'sys/netipsec/ipsec.c')
| -rw-r--r-- | sys/netipsec/ipsec.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/sys/netipsec/ipsec.c b/sys/netipsec/ipsec.c index f27019d..da75107 100644 --- a/sys/netipsec/ipsec.c +++ b/sys/netipsec/ipsec.c @@ -110,6 +110,7 @@ VNET_PCPUSTAT_SYSINIT(ipsec4stat); VNET_PCPUSTAT_SYSUNINIT(ipsec4stat); #endif /* VIMAGE */ +VNET_DEFINE(int, ipsec_direct_dispatch) = 1; VNET_DEFINE(int, ip4_ah_offsetmask) = 0; /* maybe IP_DF? */ /* DF bit on encap. 0: clear 1: set 2: copy */ VNET_DEFINE(int, ip4_ipsec_dfbit) = 0; @@ -157,6 +158,9 @@ SYSCTL_VNET_INT(_net_inet_ipsec, IPSECCTL_DEF_AH_NETLEV, ah_net_deflev, SYSCTL_VNET_INT(_net_inet_ipsec, IPSECCTL_AH_CLEARTOS, ah_cleartos, CTLFLAG_RW, &VNET_NAME(ah_cleartos), 0, "If set clear type-of-service field when doing AH computation."); +SYSCTL_VNET_INT(_net_inet_ipsec, OID_AUTO, directdispatch, + CTLFLAG_RW, &VNET_NAME(ipsec_direct_dispatch), 0, + "Use direct dispatching for incoming packets"); SYSCTL_VNET_INT(_net_inet_ipsec, IPSECCTL_AH_OFFSETMASK, ah_offsetmask, CTLFLAG_RW, &VNET_NAME(ip4_ah_offsetmask), 0, "If not set clear offset field mask when doing AH computation."); |
