summaryrefslogtreecommitdiffstats
path: root/sbin
Commit message (Collapse)AuthorAgeFilesLines
* Add vxlan interfacebryanv2014-10-203-1/+721
| | | | | | | | | | | | | | | | | | | | | vxlan creates a virtual LAN by encapsulating the inner Ethernet frame in a UDP packet. This implementation is based on RFC7348. Currently, the IPv6 support is not fully compliant with the specification: we should be able to receive UPDv6 packets with a zero checksum, but we need to support RFC6935 first. Patches for this should come soon. Encapsulation protocols such as vxlan emphasize the need for the FreeBSD network stack to support batching, GRO, and GSO. Each frame has to make two trips through the network stack, and each frame will be at most MTU sized. Performance suffers accordingly. Some latest generation NICs have begun to support vxlan HW offloads that we should also take advantage of. VIMAGE support should also be added soon. Differential Revision: https://reviews.freebsd.org/D384 Reviewed by: gnn Relnotes: yes
* WARNS=3 and style fixes. No functionality change.hrs2014-10-204-147/+147
|
* * Zero rule buffer.melifaro2014-10-181-6/+7
| | | | | | * Rename 'read' variable. Pointed by: luigi
* * Fix table sets handling.melifaro2014-10-172-3/+4
| | | | | | * Simplify formatting. Suggested by: luigi
* Add -x waittime and -X timeout options for feature parity. These arehrs2014-10-172-9/+63
| | | | | equivalent to -W and -t options of ping(8). Different letters are used because both have already been used for another purposes in ping6(8).
* Show error when deleting non-existing rule number.melifaro2014-10-131-2/+9
| | | | Found by: Oleg Ginzburg
* * Fix zeroing individual entries via ipfw(8).melifaro2014-10-131-1/+11
| | | | | | * Report error and return non-zero exit code if zeroing non-matched entries Found by: Oleg Ginzburg
* Mark iscontrol(8) and iscsi_initiator(4) obsolete.trasz2014-10-111-1/+10
| | | | | | | Differential Revision: https://reviews.freebsd.org/D931 Reviewed by: wblock@ MFC after: 3 days Sponsored by: The FreeBSD Foundation
* Partially fix build on !amd64melifaro2014-10-102-3/+3
| | | | Pointed by: bz
* Do not add late flag when file= is specified because it has a badhrs2014-10-101-8/+1
| | | | | | | side-effect. The specified file should exist before the fstab line. Reported by: wblock (long time ago) MFC after: 1 day
* Sync to HEAD@r272825.melifaro2014-10-091-3/+13
|\
| * Revert r156046. We support setting dumpdev via loader tunable again.ae2014-10-081-3/+13
| | | | | | | | | | | | Also change default disk name to ada. MFC after: 3 weeks
* | * Fix use-after-free in table printing code.melifaro2014-10-091-5/+6
| | | | | | | | * Fix showing human-readable error in table cmds code.
* | Sync to HEAD@r272609.melifaro2014-10-062-16/+30
|\ \ | |/
| * Improve "reserved keywords" hack:melifaro2014-10-061-4/+25
| | | | | | | | | | | | | | | | | | | | | | we can't easily predict (in current parsing model) if the keyword is ipfw(8) reserved keyword or port name. Checking proto database via getprotobyname() consumes a lot of CPU and leads to tens of seconds for parsing large ruleset. Use list of reserved keywords and check them as pre-requisite before doing getprotobyname(). Obtained from: Yandex LLC
| * Use printb() for boolean flags in ro_opts and actor_state for LACP.hrs2014-10-051-12/+5
| |
* | Fix tracked interface list retrieval.melifaro2014-10-051-1/+1
| |
* | Fix GCC wardnings.melifaro2014-10-042-4/+5
| |
* | Sync to HEAD@r272516.melifaro2014-10-0418-381/+555
|\ \ | |/
| * Revert r272390.hrs2014-10-021-1/+1
| | | | | | | | Pointed out by: glebius
| * Separate option handling from SIOC[SG]LAGG to SIOC[SG]LAGGOPTS forhrs2014-10-021-22/+27
| | | | | | | | backward compatibility with old ifconfig(8).
| * Add IFCAP_HWSTATS.hrs2014-10-021-1/+1
| |
| * Virtualize lagg(4) cloner. This change fixes a panic when tearing downhrs2014-10-012-10/+115
| | | | | | | | | | | | | | | | | | | | | | if_lagg(4) interfaces which were cloned in a vnet jail. Sysctl nodes which are dynamically generated for each cloned interface (net.link.lagg.N.*) have been removed, and use_flowid and flowid_shift ifconfig(8) parameters have been added instead. Flags and per-interface statistics counters are displayed in "ifconfig -v". CR: D842
| * Merged from r183296.nyan2014-09-281-2/+2
| | | | | | | | Add missing library dependencies.
| * Refactor the code a little bit to reduce duplicated code.delphij2014-09-261-102/+87
| | | | | | | | | | Reviewed by: mjg MFC after: 2 weeks
| * Explicitly set errno to 0 before calling strto*.delphij2014-09-251-0/+3
| | | | | | | | | | Suggested by: mjg MFC after: 2 weeks
| * The strtol(3) family of functions would set errno when it hits one.delphij2014-09-251-8/+16
| | | | | | | | | | | | | | | | Check errno and handle it as invalid input. Obtained from: HardenedBSD Submitted by: David CARLIER <devnexen@gmail.com> MFC after: 2 weeks
| * Constify a parameter of name2oid. No functional change.delphij2014-09-231-2/+2
| | | | | | | | MFC after: 2 months
| * Fix a typo.hrs2014-09-211-1/+1
| |
| * Fix a bug which could make routed(8) daemon exit by sending a special RIPhrs2014-09-215-7/+35
| | | | | | | | | | | | query from a remote machine, and disable accepting it by default. This requests a routed(8) daemon to dump routing information base for debugging purpose. An -i flag to enable it has been added.
| * Fix a problem that reply packets are not received when -i T option is sethrs2014-09-202-232/+166
| | | | | | | | | | | | | | | | | | | | | | | | and (T < RTT). - Use select(2) for timeout instead of interval timer. Remove poll(2) support. - Use sigaction(2) instead of signal(3). - Exit in SIGINT handler when two signals are received and doing reverse DNS lookup as ping(8) does. - Remove redundant variables used for getaddrinfo(3). PR: 151023
| * Revert changes in r269180. It could cause -c N option to enter anhrs2014-09-201-8/+2
| | | | | | | | | | | | infinite loop if no reply packet is received. PR: 151023
| * The lagg(4) interface is based on trunk(4) interface from OpenBSD.araujo2014-09-181-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | The FreeBSD is the only system that has the FEC protocol, that is a simple alias to loadbalance protocol and does not implement the ancient Cisco FEC standard. From now on, we remove the fec protocol from the documentation and keep the FEC code only for compatibility. Phabric: D539 Reviewed by: glebius, thompsa Approved by: glebius Sponsored by: QNAP Systems Inc.
| * Add laggproto broadcast, it allows sends frames to all ports of the lagg(4) ↵araujo2014-09-181-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | group and receives frames on any port of the lagg(4). Phabric: D549 Reviewed by: glebius, thompsa Approved by: glebius Obtained from: OpenBSD Sponsored by: QNAP Systems Inc.
| * If fgets(3) fails in getbounds(), show strerror(3) if not an EOF. Also fixbdrewery2014-09-171-1/+5
| | | | | | | | | | | | | | | | | | a FILE* leak in getbounds(). Submitted by: Conrad Meyer <conrad.meyer@isilon.com> PR: 192032 Sponsored by: EMC / Isilon Storage Division MFC after: 1 week
| * Add DEF_CLONE_CMD_ARG2bryanv2014-09-141-0/+1
| | | | | | | | | | | | | | This will be used in the forthcoming vxlan import. Reviewed by: gnn Phabric: https://reviews.freebsd.org/D382
| * Update CAM CCB accounting for the new status quo.mav2014-09-141-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | devq_openings counter lost its meaning after allocation queues has gone. held counter is still meaningful, but problematic to update due to separate locking of CCB allocation and queuing. To fix that replace devq_openings counter with allocated counter. held is now calculated on request as difference between number of allocated, queued and active CCBs. MFC after: 1 month
| * Do not try to read i2c info when no transceiver is present.melifaro2014-09-131-2/+4
| | | | | | | | | | MFC with: r270064 Sponsored by: Yandex LLC
| * Add a sysctl to export the EFI memory map along with a handler in thejhb2014-09-131-0/+94
| | | | | | | | | | | | | | | | sysctl(8) binary to format it. Reviewed by: emaste MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D771
| * Pass the length of an structure to the pretty-printer backends as ajhb2014-09-121-12/+12
| | | | | | | | size_t instead of an int.
| * Since r270929 raw sockets expect network byte order.glebius2014-09-111-11/+0
| | | | | | | | Submitted by: avg
| * Fix a bug which could break extended attributes in a dump output.hrs2014-09-101-1/+6
| | | | | | | | | | | | | | | | This occurred when a file was >892kB long and had a large data (>1kB) in the extended attributes. Reported by: Masashi Toriumi Reviewed by: mckusick
| * Add the ability to set `prefer_source' flag to an IPv6 address.ae2014-09-092-1/+18
| | | | | | | | | | | | | | | | | | | | | | It affects the IPv6 source address selection algorithm (RFC 6724) and allows override the last rule ("longest matching prefix") for choosing among equivalent addresses. The address with `prefer_source' will be preferred source address. Obtained from: Yandex LLC MFC after: 1 month Sponsored by: Yandex LLC
* | Document new table values.melifaro2014-10-031-45/+47
| | | | | | | | Sponsored by: Yandex LLC
* | Make ipfw_nat module use IP_FW3 codes.melifaro2014-09-071-116/+241
| | | | | | | | | | | | | | | | | | | | | | | | | | Kernel changes: * Split kernel/userland nat structures eliminating IPFW_INTERNAL hack. * Add IP_FW_NAT44_* codes resemblin old ones. * Assume that instances can be named (no kernel support currently). * Use both UH+WLOCK locks for all configuration changes. * Provide full ABI support for old sockopts. Userland changes: * Use IP_FW_NAT44_* codes for nat operations. * Remove undocumented ability to show ranges of nat "log" entries.
* | Change copyrights to the proper one.melifaro2014-09-051-7/+3
| |
* | Return setsockopt() directly.melifaro2014-09-051-4/+1
| | | | | | | | Suggested by: Steven Hartland at killing@multiplay.co.uk.
* | Sync to HEAD@r271160.melifaro2014-09-058-63/+87
|\ \ | |/
| * * Unconditionally turn on SIOCGI2C probing for all interfacesmelifaro2014-09-031-11/+17
| | | | | | | | | | | | | | | | | | | | | | on "ifconfig -v". I've seen no measurable timing difference for doing additional SIOCGI2C call for system with 4k vlans. * Determine appropriate handler (SFP/QSFP) by reading identification byte (which is the same for both SFF-8472 and SFF-8436) instead of checking driver name. MFC with: r270064 Sponsored by: Yandex LLC
| * Add lock annotations to the threading API used by hastd.ed2014-09-012-13/+13
| | | | | | | | Approved by: pjd@
OpenPOWER on IntegriCloud