diff options
| author | Andrey V. Elsukov <ae@FreeBSD.org> | 2017-04-03 03:07:48 +0000 |
|---|---|---|
| committer | Andrey V. Elsukov <ae@FreeBSD.org> | 2017-04-03 03:07:48 +0000 |
| commit | aac74aeac76d148e852630a740403818f749a87b (patch) | |
| tree | 15876d350a4e90d0fa47a2e832127ed426cfe687 /sys/modules/Makefile | |
| parent | 11c56650f057c4e91f7d39f38000847e4e000619 (diff) | |
| download | src-aac74aeac76d148e852630a740403818f749a87b.tar.gz src-aac74aeac76d148e852630a740403818f749a87b.zip | |
Add ipfw_pmod kernel module.
The module is designed for modification of a packets of any protocols.
For now it implements only TCP MSS modification. It adds the external
action handler for "tcp-setmss" action.
A rule with tcp-setmss action does additional check for protocol and
TCP flags. If SYN flag is present, it parses TCP options and modifies
MSS option if its value is greater than configured value in the rule.
Then it adjustes TCP checksum if needed. After handling the search
continues with the next rule.
Obtained from: Yandex LLC
MFC after: 2 weeks
Relnotes: yes
Sponsored by: Yandex LLC
No objection from: #network
Differential Revision: https://reviews.freebsd.org/D10150
Notes
Notes:
svn path=/head/; revision=316435
Diffstat (limited to 'sys/modules/Makefile')
| -rw-r--r-- | sys/modules/Makefile | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/sys/modules/Makefile b/sys/modules/Makefile index 0ce459221bc7..ae25105d510a 100644 --- a/sys/modules/Makefile +++ b/sys/modules/Makefile @@ -173,6 +173,7 @@ SUBDIR= \ ipfw_nat \ ${_ipfw_nat64} \ ${_ipfw_nptv6} \ + ${_ipfw_pmod} \ ${_ipmi} \ ip6_mroute_mod \ ip_mroute_mod \ @@ -443,6 +444,7 @@ _toecore= toecore _if_enc= if_enc _if_gif= if_gif _if_gre= if_gre +_ipfw_pmod= ipfw_pmod .if ${MK_IPSEC_SUPPORT} != "no" _ipsec= ipsec .endif |