| Commit message (Expand) | Author | Age | Files | Lines |
* | Turning on IPSEC used to introduce a slight amount of performance | gnn | 2015-10-27 | 1 | -0/+6 |
* | Reduce overhead of IPSEC for traffic generated from host | eri | 2015-07-03 | 1 | -0/+6 |
* | Make ipsec_in_reject() static. We use ipsec[46]_in_reject() instead. | ae | 2015-04-27 | 1 | -1/+2 |
* | Change ipsec_address() and ipsec_logsastr() functions to take two | ae | 2015-04-18 | 1 | -45/+17 |
* | Rename ip4_def_policy variable to def_policy. It is used by both IPv4 and | ae | 2014-12-24 | 1 | -16/+11 |
* | Treat errors when retrieving security policy as policy violation. | ae | 2014-12-11 | 1 | -2/+4 |
* | Initialize error variable. | ae | 2014-12-11 | 1 | -0/+1 |
* | Remove flag/flags argument from the following functions: | ae | 2014-12-11 | 1 | -20/+10 |
* | Remove __P() macro. | ae | 2014-12-03 | 1 | -9/+9 |
* | Remove route chaching support from ipsec code. It isn't used for some time. | ae | 2014-12-02 | 1 | -1/+0 |
* | Remove SYSCTL_VNET_* macros, and simply put CTLFLAG_VNET where needed. | glebius | 2014-11-07 | 1 | -40/+40 |
* | Remove _IP_VHL* macros and related ifdefs. | ae | 2014-04-16 | 1 | -12/+0 |
* | The r48589 promised to remove implicit inclusion of if_var.h soon. Prepare | glebius | 2013-10-26 | 1 | -0/+1 |
* | Migrate structs ahstat, espstat, ipcompstat, ipipstat, pfkeystat, | ae | 2013-07-09 | 1 | -12/+18 |
* | Use IPSECSTAT_INC() and IPSEC6STAT_INC() macros for ipsec statistics | ae | 2013-06-20 | 1 | -4/+4 |
* | Switch the entire IPv4 stack to keep the IP packet header | glebius | 2012-10-22 | 1 | -3/+2 |
* | Announce both IPsec and UDP Encap (NAT-T) if available for | bz | 2010-10-30 | 1 | -0/+5 |
* | MFP4: @176978-176982, 176984, 176990-176994, 177441 | bz | 2010-04-29 | 1 | -0/+1 |
* | Fix a logic error in ipsec code that extracts | eri | 2010-04-02 | 1 | -1/+1 |
* | Merge the remainder of kern_vimage.c and vimage.h into vnet.c and | rwatson | 2009-08-01 | 1 | -1/+0 |
* | Introduce and use a sysinit-based initialization scheme for virtual | rwatson | 2009-07-23 | 1 | -25/+3 |
* | Garbage collect vnet module registrations that have neither constructors | rwatson | 2009-07-20 | 1 | -1/+0 |
* | Build on Jeff Roberson's linker-set based dynamic per-CPU allocator | rwatson | 2009-07-14 | 1 | -167/+77 |
* | Properly hide IPv4 only variables and functions under #ifdef INET. | bz | 2009-06-10 | 1 | -0/+2 |
* | Introduce an infrastructure for dismantling vnet instances. | zec | 2009-06-08 | 1 | -2/+18 |
* | Add sysctls to toggle the behaviour of the (former) IPSEC_FILTERTUNNEL | bz | 2009-05-23 | 1 | -0/+16 |
* | Permit buiding kernels with options VIMAGE, restricted to only a single | zec | 2009-04-30 | 1 | -0/+1 |
* | Introduce vnet module registration / initialization framework with | zec | 2009-04-11 | 1 | -0/+14 |
* | First pass at separating per-vnet initializer functions | zec | 2009-04-06 | 1 | -0/+12 |
* | Try to remove/assimilate as much of formerly IPv4/6 specific | bz | 2009-02-08 | 1 | -214/+56 |
* | Like in the rest of the file and the network stack use inp as | bz | 2008-12-27 | 1 | -30/+30 |
* | Non-functional (style) changes: | bz | 2008-12-27 | 1 | -206/+208 |
* | Convert function definitions to constantly use ANSI-style | bz | 2008-12-27 | 1 | -98/+34 |
* | Rewrite ipsec6_setspidx_inpcb() to match the logic in the | bz | 2008-12-27 | 1 | -21/+11 |
* | For consistency with ipsec4_setspidx_inpcb() rename file local function | bz | 2008-12-27 | 1 | -3/+3 |
* | Change the in6p variable names to inp to be able to diff | bz | 2008-12-27 | 1 | -16/+16 |
* | Make ipsec_getpolicybysock() static and no longer export it. It has not | bz | 2008-12-27 | 1 | -6/+2 |
* | Another step assimilating IPv[46] PCB code - directly use | bz | 2008-12-15 | 1 | -20/+20 |
* | Conditionally compile out V_ globals while instantiating the appropriate | zec | 2008-12-10 | 1 | -0/+6 |
* | Unify ipsec[46]_delete_pcbpolicy in ipsec_delete_pcbpolicy. | bz | 2008-11-27 | 1 | -22/+1 |
* | Merge more of currently non-functional (i.e. resolving to | zec | 2008-11-26 | 1 | -1/+1 |
* | Unbreak the build without INET6. | bz | 2008-11-25 | 1 | -0/+2 |
* | Change the initialization methodology for global variables scheduled | zec | 2008-11-19 | 1 | -22/+57 |
* | Step 1.5 of importing the network stack virtualization infrastructure | zec | 2008-10-02 | 1 | -52/+86 |
* | Commit step 1 of the vimage project, (network stack) | bz | 2008-08-17 | 1 | -15/+16 |
* | Fill in a few sysctl descriptions. | trhodes | 2008-07-26 | 1 | -24/+29 |
* | Document a few sysctls. While here, remove dead code | trhodes | 2008-07-20 | 1 | -26/+24 |
* | In addition to the ipsec_osdep.h removal a week ago, now also eliminate | bz | 2008-05-24 | 1 | -4/+0 |
* | In keeping with style(9)'s recommendations on macros, use a ';' | rwatson | 2008-03-16 | 1 | -1/+1 |
* | Rather than passing around a cached 'priv', pass in an ucred to | bz | 2008-02-02 | 1 | -11/+14 |