| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Set the proper direction to check for policies in this one case. | George V. Neville-Neil | 2015-10-29 | 1 | -1/+1 |
| * | Turning on IPSEC used to introduce a slight amount of performance | George V. Neville-Neil | 2015-10-27 | 1 | -0/+4 |
| * | Take extra reference to security policy before calling crypto_dispatch(). | Andrey V. Elsukov | 2015-09-30 | 1 | -3/+1 |
| * | Remove now unneded KEY_FREESP() for case when ipsec[46]_process_packet() | Andrey V. Elsukov | 2015-04-27 | 1 | -3/+1 |
| * | Fix possible use after free due to security policy deletion. | Andrey V. Elsukov | 2015-04-27 | 1 | -3/+4 |
| * | Use ipsec4_in_reject() to simplify ip_ipsec_fwd() and ip_ipsec_input(). | Andrey V. Elsukov | 2014-12-11 | 1 | -31/+3 |
| * | Remove flag/flags argument from the following functions: | Andrey V. Elsukov | 2014-12-11 | 1 | -6/+4 |
| * | Remove flags and tunalready arguments from ipsec4_process_packet() | Andrey V. Elsukov | 2014-12-11 | 1 | -1/+1 |
| * | Move ip_ipsec_fwd() from ip_input() into ip_forward(). | Andrey V. Elsukov | 2014-12-11 | 1 | -26/+12 |
| * | Remove PACKET_TAG_IPSEC_IN_DONE mbuf tag lookup and usage of its | Andrey V. Elsukov | 2014-12-11 | 1 | -23/+7 |
| * | Remove check for presence of PACKET_TAG_IPSEC_PENDING_TDB and | Andrey V. Elsukov | 2014-12-11 | 1 | -49/+6 |
| * | Remove route chaching support from ipsec code. It isn't used for some time. | Andrey V. Elsukov | 2014-12-02 | 1 | -30/+1 |
| * | Remove SYSCTL_VNET_* macros, and simply put CTLFLAG_VNET where needed. | Gleb Smirnoff | 2014-11-07 | 1 | -2/+2 |
| * | drop unnecessary ifdef IPSEC's. This file is only compiled when IPSEC | John-Mark Gurney | 2014-09-26 | 1 | -13/+0 |
| * | - Remove rt_metrics_lite and simply put its members into rtentry. | Gleb Smirnoff | 2014-03-05 | 1 | -3/+1 |
| * | The r48589 promised to remove implicit inclusion of if_var.h soon. Prepare | Gleb Smirnoff | 2013-10-26 | 1 | -0/+1 |
| * | Switch the entire IPv4 stack to keep the IP packet header | Gleb Smirnoff | 2012-10-22 | 1 | -6/+2 |
| * | Mechanically remove the last stray remains of spl* calls from net*/*. | Andre Oppermann | 2012-10-18 | 1 | -12/+2 |
| * | After r241245 it appeared that in_delayed_cksum(), which still expects | Gleb Smirnoff | 2012-10-08 | 1 | -2/+3 |
| * | Clean up some #endif comments removing from short sections. Add #endif | Bjoern A. Zeeb | 2012-01-22 | 1 | -1/+1 |
| * | Correct comments and debug logging in ipsec to better match reality. | Bjoern A. Zeeb | 2011-06-08 | 1 | -1/+1 |
| * | After some off-list discussion, revert a number of changes to the | Dimitry Andric | 2010-11-22 | 1 | -2/+2 |
| * | Apply the STATIC_VNET_DEFINE and STATIC_DPCPU_DEFINE macros throughout | Dimitry Andric | 2010-11-14 | 1 | -2/+2 |
| * | Make the IPsec SADB embedded route cache a union to be able to hold both the | Bjoern A. Zeeb | 2010-10-23 | 1 | -1/+1 |
| * | The proper fix for the delayed SCTP checksum is to | Randall Stewart | 2010-03-12 | 1 | -1/+1 |
| * | Remove ifdefed out part of code, which seems to have originated a decade ago | Edward Tomasz Napierala | 2009-11-09 | 1 | -16/+1 |
| * | Merge the remainder of kern_vimage.c and vimage.h into vnet.c and | Robert Watson | 2009-08-01 | 1 | -1/+0 |
| * | Remove unused VNET_SET() and related macros; only VNET_GET() is | Robert Watson | 2009-07-16 | 1 | -1/+1 |
| * | Build on Jeff Roberson's linker-set based dynamic per-CPU allocator | Robert Watson | 2009-07-14 | 1 | -8/+14 |
| * | Only four out of nine arguments for ip_ipsec_output() are actually used. | Pawel Jakub Dawidek | 2009-06-05 | 1 | -2/+1 |
| * | Add sysctls to toggle the behaviour of the (former) IPSEC_FILTERTUNNEL | Bjoern A. Zeeb | 2009-05-23 | 1 | -2/+9 |
| * | Don't require packet to match a route (any route; this information wasn't | Edward Tomasz Napierala | 2009-04-28 | 1 | -1/+2 |
| * | Update stats in struct ipstat using four new macros, IPSTAT_ADD(), | Robert Watson | 2009-04-11 | 1 | -1/+1 |
| * | Try to remove/assimilate as much of formerly IPv4/6 specific | Bjoern A. Zeeb | 2009-02-08 | 1 | -3/+1 |
| * | Adds support for SCTP checksum offload. This means | Randall Stewart | 2009-02-03 | 1 | -1/+10 |
| * | Rather than using hidden includes (with cicular dependencies), | Bjoern A. Zeeb | 2008-12-02 | 1 | -0/+1 |
| * | Step 1.5 of importing the network stack virtualization infrastructure | Marko Zec | 2008-10-02 | 1 | -0/+3 |
| * | Commit step 1 of the vimage project, (network stack) | Bjoern A. Zeeb | 2008-08-17 | 1 | -1/+2 |
| * | Take the route mtu into account, if available, when sending an | Bjoern A. Zeeb | 2008-04-09 | 1 | -2/+1 |
| * | Correct IPsec behaviour with a 'use' level in SP but no SA available. | Bjoern A. Zeeb | 2008-03-14 | 1 | -0/+12 |
| * | Add FBSDID to all files in netinet so that people can more | Mike Silbersack | 2007-10-07 | 1 | -2/+3 |
| * | Rename option IPSEC_FILTERGIF to IPSEC_FILTERTUNNEL. | Bjoern A. Zeeb | 2007-08-05 | 1 | -3/+3 |
| * | Commit the change from FAST_IPSEC to IPSEC. The FAST_IPSEC | George V. Neville-Neil | 2007-07-03 | 1 | -10/+10 |
| * | Commit IPv6 support for FAST_IPSEC to the tree. | George V. Neville-Neil | 2007-07-01 | 1 | -194/+2 |
| * | Move universally to ANSI C function declarations, with relatively | Robert Watson | 2007-05-10 | 1 | -3/+2 |
| * | Remove unneeded mac.h include. | Robert Watson | 2006-07-06 | 1 | -1/+0 |
| * | Make sure the ip data pointer is correct before touching it again | Bjoern A. Zeeb | 2006-05-05 | 1 | -0/+1 |
| * | Move the IPSEC related code blocks to their own file to unclutter | Andre Oppermann | 2006-02-01 | 1 | -0/+579 |
