diff options
| author | dwmalone <dwmalone@FreeBSD.org> | 2004-08-14 15:32:40 +0000 |
|---|---|---|
| committer | dwmalone <dwmalone@FreeBSD.org> | 2004-08-14 15:32:40 +0000 |
| commit | 5df13d37b27b8510415fb500f01a289443950ebb (patch) | |
| tree | 56a806b0847f95ede378bb97ce9bfcb595420ea2 /sys/netipsec/xform_ipip.c | |
| parent | 271672aa9c335d2a4944e53a99960718533d3f22 (diff) | |
| download | FreeBSD-src-5df13d37b27b8510415fb500f01a289443950ebb.zip FreeBSD-src-5df13d37b27b8510415fb500f01a289443950ebb.tar.gz | |
Get rid of the RANDOM_IP_ID option and make it a sysctl. NetBSD
have already done this, so I have styled the patch on their work:
1) introduce a ip_newid() static inline function that checks
the sysctl and then decides if it should return a sequential
or random IP ID.
2) named the sysctl net.inet.ip.random_id
3) IPv6 flow IDs and fragment IDs are now always random.
Flow IDs and frag IDs are significantly less common in the
IPv6 world (ie. rarely generated per-packet), so there should
be smaller performance concerns.
The sysctl defaults to 0 (sequential IP IDs).
Reviewed by: andre, silby, mlaier, ume
Based on: NetBSD
MFC after: 2 months
Diffstat (limited to 'sys/netipsec/xform_ipip.c')
| -rw-r--r-- | sys/netipsec/xform_ipip.c | 7 |
1 files changed, 1 insertions, 6 deletions
diff --git a/sys/netipsec/xform_ipip.c b/sys/netipsec/xform_ipip.c index cbdc02f..4ede1d2 100644 --- a/sys/netipsec/xform_ipip.c +++ b/sys/netipsec/xform_ipip.c @@ -41,7 +41,6 @@ */ #include "opt_inet.h" #include "opt_inet6.h" -#include "opt_random_ip_id.h" #include <sys/param.h> #include <sys/systm.h> @@ -450,11 +449,7 @@ ipip_output( ipo->ip_src = saidx->src.sin.sin_addr; ipo->ip_dst = saidx->dst.sin.sin_addr; -#ifdef RANDOM_IP_ID - ipo->ip_id = ip_randomid(); -#else - ipo->ip_id = htons(ip_id++); -#endif + ipo->ip_id = ip_newid(); /* If the inner protocol is IP... */ if (tp == IPVERSION) { |
