| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Announce both IPsec and UDP Encap (NAT-T) if available for | bz | 2010-10-30 | 1 | -0/+5 |
| * | Fix typo in comment. | thomas | 2010-10-25 | 1 | -1/+1 |
| * | Make the IPsec SADB embedded route cache a union to be able to hold both the | bz | 2010-10-23 | 3 | -6/+13 |
| * | Remove dead code: | bz | 2010-10-14 | 1 | -3/+1 |
| * | Style: make the asterisk go with the variable name, not the type. | bz | 2010-10-14 | 1 | -1/+1 |
| * | MFp4 @178283: | bz | 2010-05-24 | 1 | -1/+1 |
| * | Set SA's natt_type before calling key_mature() in key_add(), | vanhu | 2010-05-05 | 1 | -6/+6 |
| * | Update SA's NAT-T stuff before calling key_mature() in key_update(), | vanhu | 2010-05-05 | 1 | -6/+6 |
| * | MFP4: @176978-176982, 176984, 176990-176994, 177441 | bz | 2010-04-29 | 9 | -44/+50 |
| * | Locks SPTREE when setting some SP entries to state DEAD. | vanhu | 2010-04-15 | 1 | -0/+6 |
| * | Fix a logic error in ipsec code that extracts | eri | 2010-04-02 | 1 | -1/+1 |
| * | When tearing down IPsec as part of a (virtual) network stack, | bz | 2010-03-28 | 1 | -7/+9 |
| * | Correct typo in comment. | pjd | 2010-02-18 | 1 | -1/+1 |
| * | Enable IPcomp by default. | bz | 2009-11-29 | 1 | -1/+1 |
| * | Add more statistics variables for IPcomp. | bz | 2009-11-29 | 2 | -3/+19 |
| * | Assimilate very similar input and output code paths | bz | 2009-11-29 | 1 | -4/+2 |
| * | Only add the IPcomp header if crypto reported success and we have a lower | bz | 2009-11-29 | 1 | -51/+53 |
| * | Remove whitespace. | bz | 2009-11-28 | 1 | -3/+3 |
| * | Directly send data uncompressed if the packet payload size is lower than | bz | 2009-11-28 | 1 | -0/+11 |
| * | Correct a typo. | bz | 2009-11-28 | 1 | -1/+1 |
| * | fixed two race conditions when inserting/removing SAs via PFKey, | vanhu | 2009-11-17 | 1 | -2/+3 |
| * | Changed an IPSEC_ASSERT to a simple test, as such invalid packets | vanhu | 2009-10-01 | 1 | -3/+9 |
| * | When checking traffic endpoint's adresses families in key_spdadd(), | vanhu | 2009-09-16 | 1 | -12/+2 |
| * | Silent gcc? Yeah, you wish. What I ment was to silence gcc. | pjd | 2009-09-06 | 1 | -2/+2 |
| * | Initialize state_valid and arraysize variable so gcc won't complain. | pjd | 2009-09-06 | 1 | -1/+3 |
| * | Improve code a bit by eliminating goto and having one unlock per lock. | pjd | 2009-09-06 | 1 | -4/+3 |
| * | Correct typo in comment. | pjd | 2009-09-06 | 1 | -1/+1 |
| * | Rework global locks for interface list and index management, correcting | rwatson | 2009-08-23 | 1 | -4/+4 |
| * | Merge the remainder of kern_vimage.c and vimage.h into vnet.c and | rwatson | 2009-08-01 | 11 | -11/+0 |
| * | Introduce and use a sysinit-based initialization scheme for virtual | rwatson | 2009-07-23 | 2 | -26/+4 |
| * | Garbage collect vnet module registrations that have neither constructors | rwatson | 2009-07-20 | 3 | -23/+0 |
| * | Reimplement and/or implement vnet list locking by replacing a mostly | rwatson | 2009-07-19 | 1 | -2/+2 |
| * | Remove unused VNET_SET() and related macros; only VNET_GET() is | rwatson | 2009-07-16 | 11 | -51/+51 |
| * | Build on Jeff Roberson's linker-set based dynamic per-CPU allocator | rwatson | 2009-07-14 | 21 | -713/+274 |
| * | Add address list locking for in6_ifaddrhead/ia_link: as with locking | rwatson | 2009-06-25 | 1 | -2/+8 |
| * | Add a new global rwlock, in_ifaddr_lock, which will synchronize use of the | rwatson | 2009-06-25 | 1 | -0/+3 |
| * | Convert netinet6 to using queue(9) rather than hand-crafted linked lists | rwatson | 2009-06-24 | 1 | -1/+1 |
| * | Move setting of ports from NAT-T below key_getsah() and actually | bz | 2009-06-19 | 1 | -8/+9 |
| * | Add the explicit include of vimage.h to another five .c files still | bz | 2009-06-17 | 1 | -0/+1 |
| * | Added support for NAT-Traversal (RFC 3948) in IPsec stack. | vanhu | 2009-06-12 | 5 | -5/+691 |
| * | Properly hide IPv4 only variables and functions under #ifdef INET. | bz | 2009-06-10 | 3 | -0/+6 |
| * | After r193232 rt_tables in vnet.h are no longer indirectly dependent on | bz | 2009-06-08 | 2 | -2/+0 |
| * | Introduce an infrastructure for dismantling vnet instances. | zec | 2009-06-08 | 4 | -3/+91 |
| * | Reimplement the netisr framework in order to support parallel netisr | rwatson | 2009-06-01 | 1 | -1/+1 |
| * | Lock SPTREE before parsing it in key_spddump() | vanhu | 2009-05-27 | 1 | -1/+5 |
| * | Only decrease refcnt once when flushing SPD entries, to | vanhu | 2009-05-27 | 1 | -4/+14 |
| * | Add sysctls to toggle the behaviour of the (former) IPSEC_FILTERTUNNEL | bz | 2009-05-23 | 4 | -0/+22 |
| * | Change the curvnet variable from a global const struct vnet *, | zec | 2009-05-05 | 1 | -0/+1 |
| * | Make indentation more uniform accross vnet container structs. | zec | 2009-05-02 | 1 | -2/+2 |
| * | Permit buiding kernels with options VIMAGE, restricted to only a single | zec | 2009-04-30 | 1 | -0/+1 |
