summaryrefslogtreecommitdiffstats
path: root/sys/netipsec
Commit message (Expand)AuthorAgeFilesLines
* Merge 'struct ip6protosw' and 'struct protosw' into one. Now we havekevlo2014-08-084-14/+40
* Fix style bug: rename the refcount field of m_ext to ext_cnt, to matchglebius2014-07-111-2/+2
* The assumption in ipsec4_process_packet() that the payload may bezec2014-07-011-3/+5
* Use IPv4 statistics in ipsec4_process_packet() rather than the IPv6bz2014-05-281-2/+2
* Fixed IPv4-in-IPv6 and IPv6-in-IPv4 IPsec tunnels.vanhu2014-05-284-338/+207
* Only do a ports check if this is a NAT-T SA. Otherwise otherbz2014-05-241-6/+20
* Remove _IP_VHL* macros and related ifdefs.ae2014-04-162-24/+0
* The check for local address spoofing lacks ifaddr locking.ae2014-04-041-44/+13
* Remove unused variable.ae2014-04-041-3/+0
* Remove dead code.ae2014-04-041-13/+0
* Remove more constants related to static sysctl nodes. The MAXID constantsjhb2014-02-252-5/+0
* Initialize prot variable.ae2013-11-111-0/+1
* Provide includes that are needed in these files, and before were readglebius2013-10-263-1/+5
* The r48589 promised to remove implicit inclusion of if_var.h soon. Prepareglebius2013-10-265-1/+6
* Remove most of the remaining sysctl name list macros. They were onlyjhb2013-08-262-50/+0
* Remove the large part of struct ipsecstat. Only few fields of thisae2013-07-231-30/+4
* Migrate structs ahstat, espstat, ipcompstat, ipipstat, pfkeystat,ae2013-07-0913-55/+94
* Prepare network statistics structures for migration to PCPU counters.ae2013-07-097-135/+131
* Use corresponding macros to update statistics for AH, ESP, IPIP, IPCOMP,ae2013-06-2013-202/+194
* Use IPSECSTAT_INC() and IPSEC6STAT_INC() macros for ipsec statisticsae2013-06-205-14/+16
* Use IP6STAT_INC/IP6STAT_DEC macros to update ip6 stats.ae2013-04-092-3/+3
* Use m_get2() + m_align() instead of hand made key_alloc_mbuf(). Codeglebius2013-03-151-104/+50
* Mechanically substitute flags from historic mbuf allocator withglebius2012-12-055-33/+33
* Do not reduce ip_len by size of IP header in the ip_input()glebius2012-10-231-3/+0
* - Fix one more miss from r241913.glebius2012-10-231-2/+4
* Couple of changes missed from r241913, which convertedglebius2012-10-222-23/+9
* Switch the entire IPv4 stack to keep the IP packet headerglebius2012-10-221-3/+2
* Mechanically remove the last stray remains of spl* calls from net*/*.andre2012-10-181-6/+0
* Add missing breakkevlo2012-09-181-0/+1
* In NAT-T transport mode, allow a client to open a new connection just aftervanhu2012-09-121-3/+5
* Merge the projects/pf/head branch, that was worked on for last six months,glebius2012-09-083-6/+0
* Unexpand a couple of TAILQ_FOREACH()s.jhb2012-08-171-2/+1
* Fix a bug introduced in r221129 that leads to a panic wen using bundledbz2012-07-221-2/+1
* Merge multi-FIB IPv6 support from projects/multi-fibv6/head/:bz2012-02-171-1/+1
* Clean up some #endif comments removing from short sections. Add #endifbz2012-01-221-1/+1
* Remove unused 'plen' variable.pjd2011-11-261-2/+1
* The esp_max_ivlen global variable is not needed, we can just usepjd2011-11-261-16/+1
* malloc(M_WAITOK) never fails, so there is no need to check for NULL.pjd2011-11-261-4/+0
* Eliminate 'err' variable and just use existing 'error'.pjd2011-11-262-6/+5
* Simplify code a bit.pjd2011-11-262-12/+6
* There is no need to virtualize esp_max_ivlen.pjd2011-11-261-6/+5
* Add missing va_end() in an error case to clean up after va_start()brueffer2011-10-071-0/+1
* Update packet filter (pf) code to OpenBSD 4.5.bz2011-06-283-0/+6
* Release SP's refcount in key_get_spdbyid().vanhu2011-05-091-0/+1
* Make IPsec compile without INET adding appropriate #ifdef checks.bz2011-04-277-67/+112
* Do not allow recursive RFC3173 IPComp payload.bz2011-04-011-0/+21
* Optimisation in IPSEC(4):fabient2011-03-317-75/+69
* Fix two SA refcount:fabient2011-03-312-1/+1
* Fixed IPsec's HMAC_SHA256-512 support to be RFC4868 compliant.vanhu2011-02-184-13/+84
* After some off-list discussion, revert a number of changes to thedim2010-11-223-20/+20
OpenPOWER on IntegriCloud