The NetBSD Project

CVS log for src/sys/netipsec/key.h

[BACK] Up to [cvs.NetBSD.org] / src / sys / netipsec

Request diff between arbitrary revisions


Default branch: MAIN
Current tag: MAIN


Revision 1.36 / (download) - annotate - [select for diffs], Thu Apr 19 08:27:38 2018 UTC (6 months, 3 weeks ago) by maxv
Branch: MAIN
CVS Tags: phil-wifi-base, phil-wifi, pgoyette-compat-1020, pgoyette-compat-0930, pgoyette-compat-0906, pgoyette-compat-0728, pgoyette-compat-0625, pgoyette-compat-0521, pgoyette-compat-0502, pgoyette-compat-0422, HEAD
Changes since 1.35: +2 -2 lines
Diff to previous 1.35 (unified)

Remove extra long file paths from the headers.

Revision 1.35 / (download) - annotate - [select for diffs], Wed Apr 18 07:32:44 2018 UTC (6 months, 3 weeks ago) by maxv
Branch: MAIN
Changes since 1.34: +22 -26 lines
Diff to previous 1.34 (unified)

Style, and remove unused MALLOC_DECLARE.

Revision 1.34 / (download) - annotate - [select for diffs], Wed Jan 10 10:56:31 2018 UTC (10 months ago) by knakahara
Branch: MAIN
CVS Tags: pgoyette-compat-base, pgoyette-compat-0415, pgoyette-compat-0407, pgoyette-compat-0330, pgoyette-compat-0322, pgoyette-compat-0315
Branch point for: pgoyette-compat
Changes since 1.33: +14 -4 lines
Diff to previous 1.33 (unified)

add ipsec(4) interface, which is used for route-based VPN.

man and ATF are added later, please see man for details.

reviewed by christos@n.o, joerg@n.o and ozaki-r@n.o, thanks.
https://mail-index.netbsd.org/tech-net/2017/12/18/msg006557.html

Revision 1.33 / (download) - annotate - [select for diffs], Tue Nov 21 07:03:08 2017 UTC (11 months, 3 weeks ago) by ozaki-r
Branch: MAIN
CVS Tags: tls-maxphys-base-20171202
Changes since 1.32: +2 -2 lines
Diff to previous 1.32 (unified)

Use M_WAITOK to allocate mbufs wherever sleepable

Further changes will get rid of unnecessary NULL checks then.

Revision 1.32 / (download) - annotate - [select for diffs], Tue Oct 3 08:56:52 2017 UTC (13 months, 1 week ago) by ozaki-r
Branch: MAIN
Changes since 1.31: +2 -2 lines
Diff to previous 1.31 (unified)

Constify isr at many places (NFC)

Revision 1.31 / (download) - annotate - [select for diffs], Tue Oct 3 08:34:28 2017 UTC (13 months, 1 week ago) by ozaki-r
Branch: MAIN
Changes since 1.30: +3 -2 lines
Diff to previous 1.30 (unified)

Fix SP is broken on transport mode

isr->saidx was modified accidentally in ipsec_nextisr.

Reported by christos@
Helped investigations by christos@ and knakahara@

Revision 1.30 / (download) - annotate - [select for diffs], Tue Oct 3 08:25:21 2017 UTC (13 months, 1 week ago) by ozaki-r
Branch: MAIN
Changes since 1.29: +2 -1 lines
Diff to previous 1.29 (unified)

Don't abuse key_checkrequest just for looking up sav

It does more than expected for example key_acquire.

Revision 1.29 / (download) - annotate - [select for diffs], Wed Aug 9 09:48:11 2017 UTC (15 months ago) by ozaki-r
Branch: MAIN
CVS Tags: nick-nhusb-base-20170825
Changes since 1.28: +3 -4 lines
Diff to previous 1.28 (unified)

MP-ify SAD (savlist)

localcount(9) is used to protect savlist of sah. The basic design is
similar to MP-ifications of SPD and SAD sahlist. Please read the
locking notes of SAD for more details.

Revision 1.28 / (download) - annotate - [select for diffs], Tue Aug 8 08:23:10 2017 UTC (15 months, 1 week ago) by ozaki-r
Branch: MAIN
Changes since 1.27: +2 -1 lines
Diff to previous 1.27 (unified)

Introduce key_sa_refcnt and replace sav->refcnt with it (NFC)

Revision 1.27 / (download) - annotate - [select for diffs], Thu Aug 3 06:32:51 2017 UTC (15 months, 1 week ago) by ozaki-r
Branch: MAIN
Changes since 1.26: +3 -1 lines
Diff to previous 1.26 (unified)

Introduce KEY_SA_UNREF and replace KEY_FREESAV with it where sav will never be actually freed in the future

KEY_SA_UNREF is still key_freesav so no functional change for now.

This change reduces diff of further changes.

Revision 1.26 / (download) - annotate - [select for diffs], Wed Aug 2 01:28:03 2017 UTC (15 months, 1 week ago) by ozaki-r
Branch: MAIN
Changes since 1.25: +8 -4 lines
Diff to previous 1.25 (unified)

Make IPsec SPD MP-safe

We use localcount(9), not psref(9), to make the sptree and secpolicy (SP)
entries MP-safe because SPs need to be referenced over opencrypto
processing that executes a callback in a different context.

SPs on sockets aren't managed by the sptree and can be destroyed in softint.
localcount_drain cannot be used in softint so we delay the destruction of
such SPs to a thread context. To do so, a list to manage such SPs is added
(key_socksplist) and key_timehandler_spd deletes dead SPs in the list.

For more details please read the locking notes in key.c.

Proposed on tech-kern@ and tech-net@

Revision 1.25 / (download) - annotate - [select for diffs], Wed Jul 26 03:59:59 2017 UTC (15 months, 2 weeks ago) by ozaki-r
Branch: MAIN
Changes since 1.24: +2 -1 lines
Diff to previous 1.24 (unified)

Provide and apply key_sp_refcnt (NFC)

It simplifies further changes.

Revision 1.24 / (download) - annotate - [select for diffs], Fri Jul 21 04:39:08 2017 UTC (15 months, 3 weeks ago) by ozaki-r
Branch: MAIN
Changes since 1.23: +1 -5 lines
Diff to previous 1.23 (unified)

Don't use key_lookup_sp that depends on unstable sp->req->sav

It provided a fast look-up of SP. We will provide an alternative
method in the future (after basic MP-ification finishes).

Revision 1.23 / (download) - annotate - [select for diffs], Fri Jul 14 12:26:26 2017 UTC (16 months ago) by ozaki-r
Branch: MAIN
CVS Tags: perseant-stdc-iso10646-base, perseant-stdc-iso10646
Changes since 1.22: +2 -2 lines
Diff to previous 1.22 (unified)

Prepare to stop using isr->sav

isr is a shared resource and using isr->sav as a temporal storage
for each packet processing is racy. And also having a reference from
isr to sav makes the lifetime of sav non-deterministic; such a reference
is removed when a packet is processed and isr->sav is overwritten by
new one. Let's have a sav locally for each packet processing instead of
using shared isr->sav.

However this change doesn't stop using isr->sav yet because there are
some users of isr->sav. isr->sav will be removed after the users find
a way to not use isr->sav.

Revision 1.22 / (download) - annotate - [select for diffs], Fri Jul 14 01:24:23 2017 UTC (16 months ago) by ozaki-r
Branch: MAIN
Changes since 1.21: +4 -1 lines
Diff to previous 1.21 (unified)

Pass sav directly to opencrypto callback

In a callback, use a passed sav as-is by default and look up a sav
only if the passed sav is dead.

Revision 1.21 / (download) - annotate - [select for diffs], Thu Jul 13 01:22:44 2017 UTC (16 months ago) by ozaki-r
Branch: MAIN
Changes since 1.20: +2 -2 lines
Diff to previous 1.20 (unified)

Simplify; omit unnecessary saidx passing

- ipsec_nextisr returns a saidx but no caller uses it
- key_checkrequest is passed a saidx but it can be gotton by
  another argument (isr)

Revision 1.20 / (download) - annotate - [select for diffs], Fri Jul 7 01:37:34 2017 UTC (16 months, 1 week ago) by ozaki-r
Branch: MAIN
Changes since 1.19: +10 -10 lines
Diff to previous 1.19 (unified)

Rename key_alloc* functions (NFC)

We shouldn't use the term "alloc" for functions that just look up
data and actually don't allocate memory.

Revision 1.19 / (download) - annotate - [select for diffs], Tue May 30 01:31:07 2017 UTC (17 months, 2 weeks ago) by ozaki-r
Branch: MAIN
CVS Tags: netbsd-8-base
Branch point for: netbsd-8
Changes since 1.18: +4 -1 lines
Diff to previous 1.18 (unified)

Make refcnt operations of SA and SP atomic

Using atomic opeartions isn't optimal and should be optimized somehow
in the future though, the change allows a kernel with NET_MPSAFE to
run out a benchmark, which is useful to know performance improvement
and degradation by code changes.

Revision 1.18 / (download) - annotate - [select for diffs], Fri May 26 08:10:46 2017 UTC (17 months, 2 weeks ago) by ozaki-r
Branch: MAIN
Changes since 1.17: +1 -3 lines
Diff to previous 1.17 (unified)

Make key_cmpspidx_exactly and key_cmpspidx_withmask static

Revision 1.17 / (download) - annotate - [select for diffs], Fri May 26 08:09:44 2017 UTC (17 months, 2 weeks ago) by ozaki-r
Branch: MAIN
Changes since 1.16: +1 -2 lines
Diff to previous 1.16 (unified)

Comment out unused key_freesp_so and key_freeso

Revision 1.16 / (download) - annotate - [select for diffs], Tue May 16 02:59:22 2017 UTC (18 months ago) by ozaki-r
Branch: MAIN
CVS Tags: prg-localcount2-base3
Changes since 1.15: +1 -2 lines
Diff to previous 1.15 (unified)

Run key_timehandler in thread context (workqueue)

The handler involves object deallocations so we want to not run
it in softint.

Revision 1.15 / (download) - annotate - [select for diffs], Mon May 15 09:55:29 2017 UTC (18 months ago) by ozaki-r
Branch: MAIN
Changes since 1.14: +8 -8 lines
Diff to previous 1.14 (unified)

Show __func__ instead of __FILE__ in debug log messages

__func__ is shorter and more useful than __FILE__.

Revision 1.14 / (download) - annotate - [select for diffs], Mon Mar 30 03:51:50 2015 UTC (3 years, 7 months ago) by ozaki-r
Branch: MAIN
CVS Tags: prg-localcount2-base2, prg-localcount2-base1, prg-localcount2-base, pgoyette-localcount-base, pgoyette-localcount-20170426, pgoyette-localcount-20170320, pgoyette-localcount-20170107, pgoyette-localcount-20161104, pgoyette-localcount-20160806, pgoyette-localcount-20160726, pgoyette-localcount, nick-nhusb-base-20170204, nick-nhusb-base-20161204, nick-nhusb-base-20161004, nick-nhusb-base-20160907, nick-nhusb-base-20160529, nick-nhusb-base-20160422, nick-nhusb-base-20160319, nick-nhusb-base-20151226, nick-nhusb-base-20150921, nick-nhusb-base-20150606, nick-nhusb-base-20150406, localcount-20160914, jdolecek-ncq-base, jdolecek-ncq, bouyer-socketcan-base1, bouyer-socketcan-base, bouyer-socketcan
Branch point for: prg-localcount2
Changes since 1.13: +1 -3 lines
Diff to previous 1.13 (unified)

Tidy up opt_ipsec.h inclusions

Some inclusions of opt_ipsec.h were for IPSEC_NAT_T and are now unnecessary.
Add inclusions to some C files for IPSEC_DEBUG.

Revision 1.13 / (download) - annotate - [select for diffs], Fri May 30 01:39:03 2014 UTC (4 years, 5 months ago) by christos
Branch: MAIN
CVS Tags: tls-maxphys-base, tls-earlyentropy-base, nick-nhusb-base, netbsd-7-nhusb-base-20170116, netbsd-7-nhusb-base, netbsd-7-nhusb, netbsd-7-base, netbsd-7-2-RELEASE, netbsd-7-1-RELEASE, netbsd-7-1-RC2, netbsd-7-1-RC1, netbsd-7-1-2-RELEASE, netbsd-7-1-1-RELEASE, netbsd-7-1, netbsd-7-0-RELEASE, netbsd-7-0-RC3, netbsd-7-0-RC2, netbsd-7-0-RC1, netbsd-7-0-2-RELEASE, netbsd-7-0-1-RELEASE, netbsd-7-0, netbsd-7
Branch point for: nick-nhusb
Changes since 1.12: +3 -1 lines
Diff to previous 1.12 (unified)

Introduce 2 new variables: ipsec_enabled and ipsec_used.
Ipsec enabled is controlled by sysctl and determines if is allowed.
ipsec_used is set automatically based on ipsec being enabled, and
rules existing.

Revision 1.12 / (download) - annotate - [select for diffs], Tue Jun 4 22:47:37 2013 UTC (5 years, 5 months ago) by christos
Branch: MAIN
CVS Tags: yamt-pagecache-base9, rmind-smpnet-nbase, rmind-smpnet-base, rmind-smpnet, riastradh-xf86-video-intel-2-7-1-pre-2-21-15, riastradh-drm2-base3, riastradh-drm2-base2, riastradh-drm2-base1, riastradh-drm2-base, riastradh-drm2
Branch point for: tls-earlyentropy
Changes since 1.11: +1 -3 lines
Diff to previous 1.11 (unified)

PR/47886: Dr. Wolfgang Stukenbrock: IPSEC_NAT_T enabled kernels may access
outdated pointers and pass ESP data to UPD-sockets.
While here, simplify the code and remove the IPSEC_NAT_T option; always
compile nat-traversal in so that it does not bitrot.

Revision 1.11 / (download) - annotate - [select for diffs], Thu Jun 9 19:54:18 2011 UTC (7 years, 5 months ago) by drochner
Branch: MAIN
CVS Tags: yamt-pagecache-tag8, yamt-pagecache-base8, yamt-pagecache-base7, yamt-pagecache-base6, yamt-pagecache-base5, yamt-pagecache-base4, yamt-pagecache-base3, yamt-pagecache-base2, yamt-pagecache-base, rmind-uvmplock-nbase, rmind-uvmplock-base, netbsd-6-base, netbsd-6-0-RC1, khorben-n900, jmcneill-usbmp-pre-base2, jmcneill-usbmp-base9, jmcneill-usbmp-base8, jmcneill-usbmp-base7, jmcneill-usbmp-base6, jmcneill-usbmp-base5, jmcneill-usbmp-base4, jmcneill-usbmp-base3, jmcneill-usbmp-base2, jmcneill-usbmp-base10, jmcneill-usbmp-base, jmcneill-usbmp, jmcneill-audiomp3-base, jmcneill-audiomp3, agc-symver-base, agc-symver
Branch point for: yamt-pagecache, tls-maxphys, netbsd-6, matt-nb6-plus
Changes since 1.10: +2 -2 lines
Diff to previous 1.10 (unified)

more "const"

Revision 1.10 / (download) - annotate - [select for diffs], Mon May 23 15:17:25 2011 UTC (7 years, 5 months ago) by drochner
Branch: MAIN
CVS Tags: cherry-xenmp-base
Branch point for: cherry-xenmp
Changes since 1.9: +1 -2 lines
Diff to previous 1.9 (unified)

g/c remainders of IV handling in pfkey code -- this is done in
opencrypto now

Revision 1.9 / (download) - annotate - [select for diffs], Mon Feb 21 22:28:19 2011 UTC (7 years, 8 months ago) by drochner
Branch: MAIN
CVS Tags: bouyer-quota2-nbase
Changes since 1.8: +8 -8 lines
Diff to previous 1.8 (unified)

treat "struct secpolicyindex" and "struct secasindex" as "const" once
they are initialized -- during lifetime, no changes are expected
plus some constification of input to comparision functions etc
mostly required by the former

Revision 1.8 / (download) - annotate - [select for diffs], Sat Jul 7 18:38:23 2007 UTC (11 years, 4 months ago) by degroote
Branch: MAIN
CVS Tags: yamt-x86pmap-base4, yamt-x86pmap-base3, yamt-x86pmap-base2, yamt-x86pmap-base, yamt-x86pmap, yamt-pf42-baseX, yamt-pf42-base4, yamt-pf42-base3, yamt-pf42-base2, yamt-pf42-base, yamt-pf42, yamt-nfs-mp-base9, yamt-nfs-mp-base8, yamt-nfs-mp-base7, yamt-nfs-mp-base6, yamt-nfs-mp-base5, yamt-nfs-mp-base4, yamt-nfs-mp-base3, yamt-nfs-mp-base2, yamt-nfs-mp-base11, yamt-nfs-mp-base10, yamt-nfs-mp-base, yamt-nfs-mp, yamt-lazymbuf-base15, yamt-lazymbuf-base14, yamt-kmem-base3, yamt-kmem-base2, yamt-kmem-base, yamt-kmem, wrstuden-revivesa-base-4, wrstuden-revivesa-base-3, wrstuden-revivesa-base-2, wrstuden-revivesa-base-1, wrstuden-revivesa-base, wrstuden-revivesa, vmlocking2-base3, vmlocking2-base2, vmlocking2-base1, vmlocking2, vmlocking-nbase, vmlocking-base, uebayasi-xip-base4, uebayasi-xip-base3, uebayasi-xip-base2, uebayasi-xip-base1, uebayasi-xip-base, uebayasi-xip, simonb-wapbl-nbase, simonb-wapbl-base, simonb-wapbl, reinoud-bufcleanup-nbase, reinoud-bufcleanup-base, nick-net80211-sync-base, nick-net80211-sync, nick-hppapmap-base4, nick-hppapmap-base3, nick-hppapmap-base2, nick-hppapmap-base, nick-hppapmap, nick-csl-alignment-base5, nick-csl-alignment-base, nick-csl-alignment, netbsd-5-base, netbsd-5-2-RELEASE, netbsd-5-2-RC1, netbsd-5-2-3-RELEASE, netbsd-5-2-2-RELEASE, netbsd-5-2-1-RELEASE, netbsd-5-2, netbsd-5-1-RELEASE, netbsd-5-1-RC4, netbsd-5-1-RC3, netbsd-5-1-RC2, netbsd-5-1-RC1, netbsd-5-1-5-RELEASE, netbsd-5-1-4-RELEASE, netbsd-5-1-3-RELEASE, netbsd-5-1-2-RELEASE, netbsd-5-1-1-RELEASE, netbsd-5-1, netbsd-5-0-RELEASE, netbsd-5-0-RC4, netbsd-5-0-RC3, netbsd-5-0-RC2, netbsd-5-0-RC1, netbsd-5-0-2-RELEASE, netbsd-5-0-1-RELEASE, netbsd-5-0, netbsd-5, mjf-ufs-trans-base, mjf-devfs2-base, mjf-devfs2, mjf-devfs-base, mjf-devfs, matt-premerge-20091211, matt-nb5-pq3-base, matt-nb5-pq3, matt-nb5-mips64-u2-k2-k4-k7-k8-k9, matt-nb5-mips64-u1-k1-k5, matt-nb5-mips64-premerge-20101231, matt-nb5-mips64-premerge-20091211, matt-nb5-mips64-k15, matt-nb5-mips64, matt-nb4-mips64-k7-u2a-k9b, matt-mips64-premerge-20101231, matt-mips64-base2, matt-mips64-base, matt-mips64, matt-armv6-prevmlocking, matt-armv6-nbase, matt-armv6-base, matt-armv6, keiichi-mipv6-nbase, keiichi-mipv6-base, keiichi-mipv6, jymxensuspend-base, jym-xensuspend-nbase, jym-xensuspend-base, jym-xensuspend, jruoho-x86intr-base, jmcneill-pm-base, jmcneill-pm, jmcneill-base, hpcarm-cleanup-nbase, hpcarm-cleanup-base, hpcarm-cleanup, haad-nbase2, haad-dm-base2, haad-dm-base1, haad-dm-base, haad-dm, cube-autoconf-base, cube-autoconf, bouyer-xeni386-nbase, bouyer-xeni386-merge1, bouyer-xeni386-base, bouyer-xeni386, bouyer-xenamd64-base2, bouyer-xenamd64-base, bouyer-xenamd64, bouyer-quota2-base, ad-socklock-base1, ad-audiomp2-base, ad-audiomp2
Branch point for: rmind-uvmplock, jruoho-x86intr, bouyer-quota2
Changes since 1.7: +29 -34 lines
Diff to previous 1.7 (unified)

Ansify
Remove useless extern
bzero -> memset, bcopy -> memcpy

No functionnal changes

Revision 1.7 / (download) - annotate - [select for diffs], Wed Jun 27 20:38:33 2007 UTC (11 years, 4 months ago) by degroote
Branch: MAIN
Changes since 1.6: +12 -4 lines
Diff to previous 1.6 (unified)

Add support for options IPSEC_NAT_T (RFC 3947 and 3948) for fast_ipsec(4).

No objection on tech-net@

Revision 1.6 / (download) - annotate - [select for diffs], Sun Mar 4 06:03:29 2007 UTC (11 years, 8 months ago) by christos
Branch: MAIN
CVS Tags: yamt-idlelwp-base8, thorpej-atomic-base, thorpej-atomic, reinoud-bufcleanup
Branch point for: vmlocking, mjf-ufs-trans
Changes since 1.5: +2 -2 lines
Diff to previous 1.5 (unified)

Kill caddr_t; there will be some MI fallout, but it will be fixed shortly.

Revision 1.5 / (download) - annotate - [select for diffs], Sun Feb 18 13:55:26 2007 UTC (11 years, 8 months ago) by degroote
Branch: MAIN
CVS Tags: ad-audiomp-base, ad-audiomp
Changes since 1.4: +3 -3 lines
Diff to previous 1.4 (unified)

Constify the code following the dyoung change ( the "bug" was hidden by the
extern declaration ).
While here, remove a Kame ifdef which is useless in netipsec code

Revision 1.4 / (download) - annotate - [select for diffs], Sat Dec 10 23:44:08 2005 UTC (12 years, 11 months ago) by elad
Branch: MAIN
CVS Tags: yamt-uio_vmspace-base5, yamt-uio_vmspace, yamt-splraiseipl-base5, yamt-splraiseipl-base4, yamt-splraiseipl-base3, yamt-splraiseipl-base2, yamt-splraiseipl-base, yamt-splraiseipl, yamt-pdpolicy-base9, yamt-pdpolicy-base8, yamt-pdpolicy-base7, yamt-pdpolicy-base6, yamt-pdpolicy-base5, yamt-pdpolicy-base4, yamt-pdpolicy-base3, yamt-pdpolicy-base2, yamt-pdpolicy-base, yamt-pdpolicy, wrstuden-fixsa-newbase, wrstuden-fixsa-base-1, wrstuden-fixsa-base, wrstuden-fixsa, simonb-timecounters-base, simonb-timecounters, simonb-timcounters-final, rpaulo-netinet-merge-pcb-base, rpaulo-netinet-merge-pcb, post-newlock2-merge, peter-altq-base, peter-altq, newlock2-nbase, newlock2-base, newlock2, netbsd-4-base, netbsd-4-0-RELEASE, netbsd-4-0-RC5, netbsd-4-0-RC4, netbsd-4-0-RC3, netbsd-4-0-RC2, netbsd-4-0-RC1, netbsd-4-0-1-RELEASE, netbsd-4-0, netbsd-4, matt-nb4-arm-base, matt-nb4-arm, ktrace-lwp-base, gdamore-uart-base, gdamore-uart, elad-kernelauth-base, elad-kernelauth, chap-midi-nbase, chap-midi-base, chap-midi, abandoned-netbsd-4-base, abandoned-netbsd-4
Branch point for: yamt-idlelwp
Changes since 1.3: +2 -2 lines
Diff to previous 1.3 (unified)

Multiple inclusion protection, as suggested by christos@ on tech-kern@
few days ago.

Revision 1.3 / (download) - annotate - [select for diffs], Sat Feb 26 22:45:13 2005 UTC (13 years, 8 months ago) by perry
Branch: MAIN
CVS Tags: yamt-vop-base3, yamt-vop-base2, yamt-vop-base, yamt-vop, yamt-readahead-pervnode, yamt-readahead-perfile, yamt-readahead-base3, yamt-readahead-base2, yamt-readahead-base, yamt-readahead, yamt-km-base4, yamt-km-base3, thorpej-vnode-attr-base, thorpej-vnode-attr, netbsd-3-base, netbsd-3-1-RELEASE, netbsd-3-1-RC4, netbsd-3-1-RC3, netbsd-3-1-RC2, netbsd-3-1-RC1, netbsd-3-1-1-RELEASE, netbsd-3-1, netbsd-3-0-RELEASE, netbsd-3-0-RC6, netbsd-3-0-RC5, netbsd-3-0-RC4, netbsd-3-0-RC3, netbsd-3-0-RC2, netbsd-3-0-RC1, netbsd-3-0-3-RELEASE, netbsd-3-0-2-RELEASE, netbsd-3-0-1-RELEASE, netbsd-3-0, netbsd-3, kent-audio2-base
Branch point for: yamt-lazymbuf
Changes since 1.2: +2 -2 lines
Diff to previous 1.2 (unified)

nuke trailing whitespace

Revision 1.2 / (download) - annotate - [select for diffs], Tue Mar 2 02:22:56 2004 UTC (14 years, 8 months ago) by thorpej
Branch: MAIN
CVS Tags: yamt-km-base2, yamt-km-base, netbsd-2-base, netbsd-2-1-RELEASE, netbsd-2-1-RC6, netbsd-2-1-RC5, netbsd-2-1-RC4, netbsd-2-1-RC3, netbsd-2-1-RC2, netbsd-2-1-RC1, netbsd-2-1, netbsd-2-0-base, netbsd-2-0-RELEASE, netbsd-2-0-RC5, netbsd-2-0-RC4, netbsd-2-0-RC3, netbsd-2-0-RC2, netbsd-2-0-RC1, netbsd-2-0-3-RELEASE, netbsd-2-0-2-RELEASE, netbsd-2-0-1-RELEASE, netbsd-2-0, netbsd-2, kent-audio1-beforemerge, kent-audio1-base, kent-audio1
Branch point for: yamt-km, ktrace-lwp, kent-audio2
Changes since 1.1: +5 -1 lines
Diff to previous 1.1 (unified)

Bring the PCB policy cache over from KAME IPsec, including the "hint"
used to short-circuit IPsec processing in other places.

This is enabled only for NetBSD at the moment; in order for it to function
correctly, ipsec_pcbconn() must be called as appropriate.

Revision 1.1 / (download) - annotate - [select for diffs], Wed Aug 13 20:06:51 2003 UTC (15 years, 3 months ago) by jonathan
Branch: MAIN

Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4.
Fast-IPsec is a rework of the OpenBSD and KAME IPsec code, using the
OpenCryptoFramework (and thus hardware crypto accelerators) and
numerous detailed performance improvements.

This import is (aside from SPL-level names) the FreeBSD source,
imported ``as-is'' as a historical snapshot, for future maintenance
and comparison against the FreeBSD source.  For now, several minor
kernel-API differences are hidden by macros a shim file, ipsec_osdep.h,
which (aside from SPL names) can be targeted at either NetBSD or FreeBSD.

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.




CVSweb <webmaster@jp.NetBSD.org>