aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
* Significantly improve pf purge cpu usage by only taking locksJohn-Mark Gurney2018-09-161-15/+19
* Extended pf(4) ioctl interface and pfctl(8) to allow bandwidths ofPatrick Kelsey2018-08-222-33/+415
* pf: Limit the maximum number of fragments per packetKristof Provost2018-08-171-0/+8
* Fix a typo in comment.Luiz Otavio O Souza2018-08-151-1/+1
* pf: Take the IF_ADDR_RLOCK() when iterating over the group listKristof Provost2018-08-111-3/+8
* pf: Fix 'set skip on' for groupsKristof Provost2018-08-111-4/+14
* Use host byte order when comparing mss values.Andrey V. Elsukov2018-08-081-1/+1
* Use the new VNET_DEFINE_STATIC macro when we are defining static VNETAndrew Turner2018-07-2415-80/+80
* pf: Fix synproxyKristof Provost2018-07-141-3/+5
* pf: Fix panic on vnet jail shutdown with synproxyKristof Provost2018-07-141-1/+2
* Use correct size when we are allocating array for skipto index.Andrey V. Elsukov2018-07-121-4/+2
* Add "record-state", "set-limit" and "defer-action" rule options to ipfw.Andrey V. Elsukov2018-07-092-1/+19
* Create a new macro for static DPCPU data.Andrew Turner2018-07-051-1/+1
* Revert r335833.Will Andrews2018-07-041-0/+408
* pf: remove unused ioctls.Will Andrews2018-07-011-408/+0
* pfsync: Fix state sync during initial bulk updateKristof Provost2018-06-301-1/+1
* pf: Support "return" statements in passing rules when they fail.Kristof Provost2018-06-221-63/+81
* Switch RIB and RADIX_NODE_HEAD lock from rwlock(9) to rmlock(9).Andrey V. Elsukov2018-06-161-0/+1
* pf: Fix deadlock with route-toKristof Provost2018-06-091-8/+8
* uma: implement provisional api for per-cpu zonesMateusz Guzik2018-06-081-2/+2
* pf: Replace rwlock on PF_RULES_LOCK with rmlockKristof Provost2018-05-308-9/+9
* UDP: further performance improvements on txMatt Macy2018-05-231-9/+9
* Restore the ability to keep states after parent rule deletion.Andrey V. Elsukov2018-05-221-6/+30
* Remove check for matching the rulenum, ruleid and rule pointer fromAndrey V. Elsukov2018-05-211-28/+7
* ifnet: Replace if_addr_lock rwlock with epoch + mutexMatt Macy2018-05-184-5/+4
* Bring in some last changes in NAT64 implementation:Andrey V. Elsukov2018-05-0910-350/+380
* Retire ixgb(4)Sean Bruno2018-05-021-2/+1
* To avoid possible deadlock do not acquire JQUEUE_LOCK before callout_drain.Andrey V. Elsukov2018-04-131-3/+0
* Fix integer types mismatch for flags field in nat64stl_cfg structure.Andrey V. Elsukov2018-04-122-3/+3
* Use cfg->nomatch_verdict as return value from NAT64LSN handler whenAndrey V. Elsukov2018-04-123-10/+9
* Migrate NAT64 to FIB KPI.Andrey V. Elsukov2018-04-122-121/+84
* pf: limit ioctl to a reasonable and tuneable number of elementsKristof Provost2018-04-112-5/+22
* Fix ipfw table creation when net.inet.ip.fw.tables_sets = 0 and non zero setOleg Bulyzhin2018-04-111-1/+1
* pf: Improve ioctl validationKristof Provost2018-04-061-10/+63
* pf: Improve ioctl validation for DIOCIGETIFACES and DIOCXCOMMITKristof Provost2018-04-061-4/+18
* pf: Improve ioctl validation for DIOCRGETTABLES, DIOCRGETTSTATS, DIOCRCLRTSTA...Kristof Provost2018-04-062-18/+38
* pf: Improve ioctl validation for DIOCRADDTABLES and DIOCRDELTABLESKristof Provost2018-04-061-8/+14
* Use an accessor function to access ifr_data.Brooks Davis2018-03-301-2/+4
* netpfil: Introduce PFIL_FWD flagKristof Provost2018-03-233-47/+29
* pf: Fix memory leak in DIOCRADDTABLESKristof Provost2018-03-191-1/+3
* Do not try to reassemble IPv6 fragments in "reass" rule.Andrey V. Elsukov2018-03-121-1/+3
* pf: Cope with overly large net.pf.states_hashsizeKristof Provost2018-02-251-7/+32
* Remove duplicate #include <netinet/ip_var.h>.Andrey V. Elsukov2018-02-071-1/+0
* Rework ipfw dynamic states implementation to be lockless on fast path.Andrey V. Elsukov2018-02-074-1079/+2502
* pf: Avoid warning without INVARIANTSKristof Provost2018-02-011-3/+3
* When IPv6 packet is handled by O_REJECT opcode, convert ICMP codeAndrey V. Elsukov2018-01-241-3/+32
* pf: States have at least two referencesKristof Provost2018-01-241-1/+3
* Unsign some values related to allocation.Pedro F. Giffuni2018-01-222-3/+3
* Add UDPLite support to ipfw(4).Andrey V. Elsukov2018-01-193-5/+20
* Implement 'domainset', a cpuset based NUMA policy mechanism. This allowsJeff Roberson2018-01-121-0/+1
generated by cgit v1.2.3 (git 2.25.1) at 2024-10-23 18:34:04 +0000