aboutsummaryrefslogtreecommitdiff
path: root/sys/netipsec/ipsec.c
Commit message (Expand)AuthorAgeFilesLines
* ipsec.c: typos in the commentKonstantin Belousov2023-01-181-1/+1
* ipsec: add key_havesp_anyMateusz Guzik2022-11-221-8/+2
* ipsec: replace SECASVAR mtx by rmlockKristof Provost2022-07-191-13/+51
* ipsec: Check PMTU before sending a frame.Kornel Duleba2021-08-131-1/+1
* ipsec: Handle ICMP NEEDFRAG message.Wojciech Macek2021-08-091-0/+4
* Implement anti-replay algorithm with ESN supportMarcin Wojtas2020-10-161-85/+208
* net: clean up empty lines in .c and .h filesMateusz Guzik2020-09-011-2/+0
* Remove support for IPsec algorithms deprecated in r348205 and r360202.John Baldwin2020-05-021-5/+0
* Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (17 of many)Pawel Biernacki2020-02-261-4/+6
* Fix broken window replay check that will allow old packet to be accepted.Fabien Thomas2019-09-061-0/+2
* Make the warning intervals for deprecated crypto algorithms tunable.John Baldwin2019-06-111-0/+5
* Use the new VNET_DEFINE_STATIC macro when we are defining static VNETAndrew Turner2018-07-241-4/+4
* OpenCrypto: Convert sessions to opaque handles instead of integersConrad Meyer2018-07-181-2/+2
* OCF: Add a typedef for session identifiersConrad Meyer2018-07-131-2/+3
* Remove unused variables and sysctl declaration.Andrey V. Elsukov2018-02-191-5/+0
* sys: further adoption of SPDX licensing ID tags.Pedro F. Giffuni2017-11-201-0/+2
* crypto(9) is called from ipsec in CRYPTO_F_CBIFSYNC mode. This is workingFabien Thomas2017-11-031-0/+12
* Remove stale comments.Andrey V. Elsukov2017-08-211-2/+0
* Fix the regression introduced in r275710.Andrey V. Elsukov2017-08-211-10/+14
* Merge projects/ipsec into head/.Andrey V. Elsukov2017-02-061-967/+626
* Add direction argument to ipsec_setspidx_inpcb() function.Andrey V. Elsukov2017-01-081-7/+10
* IPsec RFC6479 support for replay window sizes up to 2^32 - 32 packets.Fabien Thomas2016-11-251-94/+74
* Get closer to a VIMAGE network stack teardown from top to bottom ratherBjoern A. Zeeb2016-06-211-1/+1
* sys/net*: minor spelling fixes.Pedro F. Giffuni2016-05-031-3/+3
* netipsec: Don't leak memory when deep copy failsConrad Meyer2016-04-261-0/+1
* Constify mbuf pointer for IPSEC functions where mbuf isn't modified.Andrey V. Elsukov2016-04-211-31/+36
* Overhaul if_enc(4) and make it loadable in run-time.Andrey V. Elsukov2015-11-251-0/+30
* Turning on IPSEC used to introduce a slight amount of performanceGeorge V. Neville-Neil2015-10-271-0/+6
* Reduce overhead of IPSEC for traffic generated from hostErmal Luçi2015-07-031-0/+6
* Make ipsec_in_reject() static. We use ipsec[46]_in_reject() instead.Andrey V. Elsukov2015-04-271-1/+2
* Change ipsec_address() and ipsec_logsastr() functions to take twoAndrey V. Elsukov2015-04-181-45/+17
* Rename ip4_def_policy variable to def_policy. It is used by both IPv4 andAndrey V. Elsukov2014-12-241-16/+11
* Treat errors when retrieving security policy as policy violation.Andrey V. Elsukov2014-12-111-2/+4
* Initialize error variable.Andrey V. Elsukov2014-12-111-0/+1
* Remove flag/flags argument from the following functions:Andrey V. Elsukov2014-12-111-20/+10
* Remove __P() macro.Andrey V. Elsukov2014-12-031-9/+9
* Remove route chaching support from ipsec code. It isn't used for some time.Andrey V. Elsukov2014-12-021-1/+0
* Remove SYSCTL_VNET_* macros, and simply put CTLFLAG_VNET where needed.Gleb Smirnoff2014-11-071-40/+40
* Remove _IP_VHL* macros and related ifdefs.Andrey V. Elsukov2014-04-161-12/+0
* The r48589 promised to remove implicit inclusion of if_var.h soon. PrepareGleb Smirnoff2013-10-261-0/+1
* Migrate structs ahstat, espstat, ipcompstat, ipipstat, pfkeystat,Andrey V. Elsukov2013-07-091-12/+18
* Use IPSECSTAT_INC() and IPSEC6STAT_INC() macros for ipsec statisticsAndrey V. Elsukov2013-06-201-4/+4
* Switch the entire IPv4 stack to keep the IP packet headerGleb Smirnoff2012-10-221-3/+2
* Announce both IPsec and UDP Encap (NAT-T) if available forBjoern A. Zeeb2010-10-301-0/+5
* MFP4: @176978-176982, 176984, 176990-176994, 177441Bjoern A. Zeeb2010-04-291-0/+1
* Fix a logic error in ipsec code that extractsErmal Luçi2010-04-021-1/+1
* Merge the remainder of kern_vimage.c and vimage.h into vnet.c andRobert Watson2009-08-011-1/+0
* Introduce and use a sysinit-based initialization scheme for virtualRobert Watson2009-07-231-25/+3
* Garbage collect vnet module registrations that have neither constructorsRobert Watson2009-07-201-1/+0
* Build on Jeff Roberson's linker-set based dynamic per-CPU allocatorRobert Watson2009-07-141-167/+77
generated by cgit v1.2.3 (git 2.25.1) at 2024-10-31 07:28:12 +0000