summaryrefslogtreecommitdiffstats
path: root/sys/netipsec
Commit message (Expand)AuthorAgeFilesLines
* Use IP6STAT_INC/IP6STAT_DEC macros to update ip6 stats.ae2013-04-092-3/+3
* Use m_get2() + m_align() instead of hand made key_alloc_mbuf(). Codeglebius2013-03-151-104/+50
* Mechanically substitute flags from historic mbuf allocator withglebius2012-12-055-33/+33
* Do not reduce ip_len by size of IP header in the ip_input()glebius2012-10-231-3/+0
* - Fix one more miss from r241913.glebius2012-10-231-2/+4
* Couple of changes missed from r241913, which convertedglebius2012-10-222-23/+9
* Switch the entire IPv4 stack to keep the IP packet headerglebius2012-10-221-3/+2
* Mechanically remove the last stray remains of spl* calls from net*/*.andre2012-10-181-6/+0
* Add missing breakkevlo2012-09-181-0/+1
* In NAT-T transport mode, allow a client to open a new connection just aftervanhu2012-09-121-3/+5
* Merge the projects/pf/head branch, that was worked on for last six months,glebius2012-09-083-6/+0
* Unexpand a couple of TAILQ_FOREACH()s.jhb2012-08-171-2/+1
* Fix a bug introduced in r221129 that leads to a panic wen using bundledbz2012-07-221-2/+1
* Merge multi-FIB IPv6 support from projects/multi-fibv6/head/:bz2012-02-171-1/+1
* Clean up some #endif comments removing from short sections. Add #endifbz2012-01-221-1/+1
* Remove unused 'plen' variable.pjd2011-11-261-2/+1
* The esp_max_ivlen global variable is not needed, we can just usepjd2011-11-261-16/+1
* malloc(M_WAITOK) never fails, so there is no need to check for NULL.pjd2011-11-261-4/+0
* Eliminate 'err' variable and just use existing 'error'.pjd2011-11-262-6/+5
* Simplify code a bit.pjd2011-11-262-12/+6
* There is no need to virtualize esp_max_ivlen.pjd2011-11-261-6/+5
* Add missing va_end() in an error case to clean up after va_start()brueffer2011-10-071-0/+1
* Update packet filter (pf) code to OpenBSD 4.5.bz2011-06-283-0/+6
* Release SP's refcount in key_get_spdbyid().vanhu2011-05-091-0/+1
* Make IPsec compile without INET adding appropriate #ifdef checks.bz2011-04-277-67/+112
* Do not allow recursive RFC3173 IPComp payload.bz2011-04-011-0/+21
* Optimisation in IPSEC(4):fabient2011-03-317-75/+69
* Fix two SA refcount:fabient2011-03-312-1/+1
* Fixed IPsec's HMAC_SHA256-512 support to be RFC4868 compliant.vanhu2011-02-184-13/+84
* After some off-list discussion, revert a number of changes to thedim2010-11-223-20/+20
* Apply the STATIC_VNET_DEFINE and STATIC_DPCPU_DEFINE macros throughoutdim2010-11-143-20/+20
* Announce both IPsec and UDP Encap (NAT-T) if available forbz2010-10-301-0/+5
* Fix typo in comment.thomas2010-10-251-1/+1
* Make the IPsec SADB embedded route cache a union to be able to hold both thebz2010-10-233-6/+13
* Remove dead code:bz2010-10-141-3/+1
* Style: make the asterisk go with the variable name, not the type.bz2010-10-141-1/+1
* MFp4 @178283:bz2010-05-241-1/+1
* Set SA's natt_type before calling key_mature() in key_add(),vanhu2010-05-051-6/+6
* Update SA's NAT-T stuff before calling key_mature() in key_update(),vanhu2010-05-051-6/+6
* MFP4: @176978-176982, 176984, 176990-176994, 177441bz2010-04-299-44/+50
* Locks SPTREE when setting some SP entries to state DEAD.vanhu2010-04-151-0/+6
* Fix a logic error in ipsec code that extractseri2010-04-021-1/+1
* When tearing down IPsec as part of a (virtual) network stack,bz2010-03-281-7/+9
* Correct typo in comment.pjd2010-02-181-1/+1
* Enable IPcomp by default.bz2009-11-291-1/+1
* Add more statistics variables for IPcomp.bz2009-11-292-3/+19
* Assimilate very similar input and output code pathsbz2009-11-291-4/+2
* Only add the IPcomp header if crypto reported success and we have a lowerbz2009-11-291-51/+53
* Remove whitespace.bz2009-11-281-3/+3
* Directly send data uncompressed if the packet payload size is lower thanbz2009-11-281-0/+11
OpenPOWER on IntegriCloud