Up to [cvs.NetBSD.org] / src / sys / netipsec
Request diff between arbitrary revisions
Default branch: MAIN
Current tag: MAIN
Revision 1.36 / (download) - annotate - [select for diffs], Thu Apr 19 08:27:38 2018 UTC (8 months, 4 weeks ago) by maxv
CVS Tags: phil-wifi-base, phil-wifi, pgoyette-compat-1226, pgoyette-compat-1126, pgoyette-compat-1020, pgoyette-compat-0930, pgoyette-compat-0906, pgoyette-compat-0728, pgoyette-compat-0625, pgoyette-compat-0521, pgoyette-compat-0502, pgoyette-compat-0422, HEAD
Changes since 1.35: +2 -2 lines
Diff to previous 1.35 (unified)
Remove extra long file paths from the headers.
Revision 1.35 / (download) - annotate - [select for diffs], Wed Apr 18 07:32:44 2018 UTC (8 months, 4 weeks ago) by maxv
Changes since 1.34: +22 -26 lines
Diff to previous 1.34 (unified)
Style, and remove unused MALLOC_DECLARE.
Revision 1.34 / (download) - annotate - [select for diffs], Wed Jan 10 10:56:31 2018 UTC (12 months ago) by knakahara
CVS Tags: pgoyette-compat-base, pgoyette-compat-0415, pgoyette-compat-0407, pgoyette-compat-0330, pgoyette-compat-0322, pgoyette-compat-0315
Branch point for: pgoyette-compat
Changes since 1.33: +14 -4 lines
Diff to previous 1.33 (unified)
add ipsec(4) interface, which is used for route-based VPN. man and ATF are added later, please see man for details. reviewed by email@example.com, firstname.lastname@example.org and email@example.com, thanks. https://mail-index.netbsd.org/tech-net/2017/12/18/msg006557.html
Revision 1.33 / (download) - annotate - [select for diffs], Tue Nov 21 07:03:08 2017 UTC (13 months, 3 weeks ago) by ozaki-r
CVS Tags: tls-maxphys-base-20171202
Changes since 1.32: +2 -2 lines
Diff to previous 1.32 (unified)
Use M_WAITOK to allocate mbufs wherever sleepable Further changes will get rid of unnecessary NULL checks then.
Revision 1.32 / (download) - annotate - [select for diffs], Tue Oct 3 08:56:52 2017 UTC (15 months, 1 week ago) by ozaki-r
Changes since 1.31: +2 -2 lines
Diff to previous 1.31 (unified)
Constify isr at many places (NFC)
Revision 1.31 / (download) - annotate - [select for diffs], Tue Oct 3 08:34:28 2017 UTC (15 months, 1 week ago) by ozaki-r
Changes since 1.30: +3 -2 lines
Diff to previous 1.30 (unified)
Fix SP is broken on transport mode isr->saidx was modified accidentally in ipsec_nextisr. Reported by christos@ Helped investigations by christos@ and knakahara@
Revision 1.30 / (download) - annotate - [select for diffs], Tue Oct 3 08:25:21 2017 UTC (15 months, 1 week ago) by ozaki-r
Changes since 1.29: +2 -1 lines
Diff to previous 1.29 (unified)
Don't abuse key_checkrequest just for looking up sav It does more than expected for example key_acquire.
Revision 1.29 / (download) - annotate - [select for diffs], Wed Aug 9 09:48:11 2017 UTC (17 months, 1 week ago) by ozaki-r
CVS Tags: nick-nhusb-base-20170825
Changes since 1.28: +3 -4 lines
Diff to previous 1.28 (unified)
MP-ify SAD (savlist) localcount(9) is used to protect savlist of sah. The basic design is similar to MP-ifications of SPD and SAD sahlist. Please read the locking notes of SAD for more details.
Revision 1.28 / (download) - annotate - [select for diffs], Tue Aug 8 08:23:10 2017 UTC (17 months, 1 week ago) by ozaki-r
Changes since 1.27: +2 -1 lines
Diff to previous 1.27 (unified)
Introduce key_sa_refcnt and replace sav->refcnt with it (NFC)
Revision 1.27 / (download) - annotate - [select for diffs], Thu Aug 3 06:32:51 2017 UTC (17 months, 2 weeks ago) by ozaki-r
Changes since 1.26: +3 -1 lines
Diff to previous 1.26 (unified)
Introduce KEY_SA_UNREF and replace KEY_FREESAV with it where sav will never be actually freed in the future KEY_SA_UNREF is still key_freesav so no functional change for now. This change reduces diff of further changes.
Revision 1.26 / (download) - annotate - [select for diffs], Wed Aug 2 01:28:03 2017 UTC (17 months, 2 weeks ago) by ozaki-r
Changes since 1.25: +8 -4 lines
Diff to previous 1.25 (unified)
Make IPsec SPD MP-safe We use localcount(9), not psref(9), to make the sptree and secpolicy (SP) entries MP-safe because SPs need to be referenced over opencrypto processing that executes a callback in a different context. SPs on sockets aren't managed by the sptree and can be destroyed in softint. localcount_drain cannot be used in softint so we delay the destruction of such SPs to a thread context. To do so, a list to manage such SPs is added (key_socksplist) and key_timehandler_spd deletes dead SPs in the list. For more details please read the locking notes in key.c. Proposed on tech-kern@ and tech-net@
Revision 1.25 / (download) - annotate - [select for diffs], Wed Jul 26 03:59:59 2017 UTC (17 months, 3 weeks ago) by ozaki-r
Changes since 1.24: +2 -1 lines
Diff to previous 1.24 (unified)
Provide and apply key_sp_refcnt (NFC) It simplifies further changes.
Revision 1.24 / (download) - annotate - [select for diffs], Fri Jul 21 04:39:08 2017 UTC (17 months, 3 weeks ago) by ozaki-r
Changes since 1.23: +1 -5 lines
Diff to previous 1.23 (unified)
Don't use key_lookup_sp that depends on unstable sp->req->sav It provided a fast look-up of SP. We will provide an alternative method in the future (after basic MP-ification finishes).
Revision 1.23 / (download) - annotate - [select for diffs], Fri Jul 14 12:26:26 2017 UTC (18 months ago) by ozaki-r
CVS Tags: perseant-stdc-iso10646-base, perseant-stdc-iso10646
Changes since 1.22: +2 -2 lines
Diff to previous 1.22 (unified)
Prepare to stop using isr->sav isr is a shared resource and using isr->sav as a temporal storage for each packet processing is racy. And also having a reference from isr to sav makes the lifetime of sav non-deterministic; such a reference is removed when a packet is processed and isr->sav is overwritten by new one. Let's have a sav locally for each packet processing instead of using shared isr->sav. However this change doesn't stop using isr->sav yet because there are some users of isr->sav. isr->sav will be removed after the users find a way to not use isr->sav.
Revision 1.22 / (download) - annotate - [select for diffs], Fri Jul 14 01:24:23 2017 UTC (18 months ago) by ozaki-r
Changes since 1.21: +4 -1 lines
Diff to previous 1.21 (unified)
Pass sav directly to opencrypto callback In a callback, use a passed sav as-is by default and look up a sav only if the passed sav is dead.
Revision 1.21 / (download) - annotate - [select for diffs], Thu Jul 13 01:22:44 2017 UTC (18 months ago) by ozaki-r
Changes since 1.20: +2 -2 lines
Diff to previous 1.20 (unified)
Simplify; omit unnecessary saidx passing - ipsec_nextisr returns a saidx but no caller uses it - key_checkrequest is passed a saidx but it can be gotton by another argument (isr)
Revision 1.20 / (download) - annotate - [select for diffs], Fri Jul 7 01:37:34 2017 UTC (18 months, 1 week ago) by ozaki-r
Changes since 1.19: +10 -10 lines
Diff to previous 1.19 (unified)
Rename key_alloc* functions (NFC) We shouldn't use the term "alloc" for functions that just look up data and actually don't allocate memory.
Revision 1.19 / (download) - annotate - [select for diffs], Tue May 30 01:31:07 2017 UTC (19 months, 2 weeks ago) by ozaki-r
CVS Tags: netbsd-8-base
Branch point for: netbsd-8
Changes since 1.18: +4 -1 lines
Diff to previous 1.18 (unified)
Make refcnt operations of SA and SP atomic Using atomic opeartions isn't optimal and should be optimized somehow in the future though, the change allows a kernel with NET_MPSAFE to run out a benchmark, which is useful to know performance improvement and degradation by code changes.
Revision 1.18 / (download) - annotate - [select for diffs], Fri May 26 08:10:46 2017 UTC (19 months, 3 weeks ago) by ozaki-r
Changes since 1.17: +1 -3 lines
Diff to previous 1.17 (unified)
Make key_cmpspidx_exactly and key_cmpspidx_withmask static
Revision 1.17 / (download) - annotate - [select for diffs], Fri May 26 08:09:44 2017 UTC (19 months, 3 weeks ago) by ozaki-r
Changes since 1.16: +1 -2 lines
Diff to previous 1.16 (unified)
Comment out unused key_freesp_so and key_freeso
Revision 1.16 / (download) - annotate - [select for diffs], Tue May 16 02:59:22 2017 UTC (20 months ago) by ozaki-r
CVS Tags: prg-localcount2-base3
Changes since 1.15: +1 -2 lines
Diff to previous 1.15 (unified)
Run key_timehandler in thread context (workqueue) The handler involves object deallocations so we want to not run it in softint.
Revision 1.15 / (download) - annotate - [select for diffs], Mon May 15 09:55:29 2017 UTC (20 months ago) by ozaki-r
Changes since 1.14: +8 -8 lines
Diff to previous 1.14 (unified)
Show __func__ instead of __FILE__ in debug log messages __func__ is shorter and more useful than __FILE__.
Revision 1.14 / (download) - annotate - [select for diffs], Mon Mar 30 03:51:50 2015 UTC (3 years, 9 months ago) by ozaki-r
CVS Tags: prg-localcount2-base2, prg-localcount2-base1, prg-localcount2-base, pgoyette-localcount-base, pgoyette-localcount-20170426, pgoyette-localcount-20170320, pgoyette-localcount-20170107, pgoyette-localcount-20161104, pgoyette-localcount-20160806, pgoyette-localcount-20160726, pgoyette-localcount, nick-nhusb-base-20170204, nick-nhusb-base-20161204, nick-nhusb-base-20161004, nick-nhusb-base-20160907, nick-nhusb-base-20160529, nick-nhusb-base-20160422, nick-nhusb-base-20160319, nick-nhusb-base-20151226, nick-nhusb-base-20150921, nick-nhusb-base-20150606, nick-nhusb-base-20150406, localcount-20160914, jdolecek-ncq-base, jdolecek-ncq, bouyer-socketcan-base1, bouyer-socketcan-base, bouyer-socketcan
Branch point for: prg-localcount2
Changes since 1.13: +1 -3 lines
Diff to previous 1.13 (unified)
Tidy up opt_ipsec.h inclusions Some inclusions of opt_ipsec.h were for IPSEC_NAT_T and are now unnecessary. Add inclusions to some C files for IPSEC_DEBUG.
Revision 1.13 / (download) - annotate - [select for diffs], Fri May 30 01:39:03 2014 UTC (4 years, 7 months ago) by christos
CVS Tags: tls-maxphys-base, tls-earlyentropy-base, nick-nhusb-base, netbsd-7-nhusb-base-20170116, netbsd-7-nhusb-base, netbsd-7-nhusb, netbsd-7-base, netbsd-7-2-RELEASE, netbsd-7-1-RELEASE, netbsd-7-1-RC2, netbsd-7-1-RC1, netbsd-7-1-2-RELEASE, netbsd-7-1-1-RELEASE, netbsd-7-1, netbsd-7-0-RELEASE, netbsd-7-0-RC3, netbsd-7-0-RC2, netbsd-7-0-RC1, netbsd-7-0-2-RELEASE, netbsd-7-0-1-RELEASE, netbsd-7-0, netbsd-7
Branch point for: nick-nhusb
Changes since 1.12: +3 -1 lines
Diff to previous 1.12 (unified)
Introduce 2 new variables: ipsec_enabled and ipsec_used. Ipsec enabled is controlled by sysctl and determines if is allowed. ipsec_used is set automatically based on ipsec being enabled, and rules existing.
Revision 1.12 / (download) - annotate - [select for diffs], Tue Jun 4 22:47:37 2013 UTC (5 years, 7 months ago) by christos
CVS Tags: yamt-pagecache-base9, rmind-smpnet-nbase, rmind-smpnet-base, rmind-smpnet, riastradh-xf86-video-intel-2-7-1-pre-2-21-15, riastradh-drm2-base3, riastradh-drm2-base2, riastradh-drm2-base1, riastradh-drm2-base, riastradh-drm2
Branch point for: tls-earlyentropy
Changes since 1.11: +1 -3 lines
Diff to previous 1.11 (unified)
PR/47886: Dr. Wolfgang Stukenbrock: IPSEC_NAT_T enabled kernels may access outdated pointers and pass ESP data to UPD-sockets. While here, simplify the code and remove the IPSEC_NAT_T option; always compile nat-traversal in so that it does not bitrot.
Revision 1.11 / (download) - annotate - [select for diffs], Thu Jun 9 19:54:18 2011 UTC (7 years, 7 months ago) by drochner
CVS Tags: yamt-pagecache-tag8, yamt-pagecache-base8, yamt-pagecache-base7, yamt-pagecache-base6, yamt-pagecache-base5, yamt-pagecache-base4, yamt-pagecache-base3, yamt-pagecache-base2, yamt-pagecache-base, rmind-uvmplock-nbase, rmind-uvmplock-base, netbsd-6-base, netbsd-6-0-RC1, khorben-n900, jmcneill-usbmp-pre-base2, jmcneill-usbmp-base9, jmcneill-usbmp-base8, jmcneill-usbmp-base7, jmcneill-usbmp-base6, jmcneill-usbmp-base5, jmcneill-usbmp-base4, jmcneill-usbmp-base3, jmcneill-usbmp-base2, jmcneill-usbmp-base10, jmcneill-usbmp-base, jmcneill-usbmp, jmcneill-audiomp3-base, jmcneill-audiomp3, agc-symver-base, agc-symver
Branch point for: yamt-pagecache, tls-maxphys, netbsd-6, matt-nb6-plus
Changes since 1.10: +2 -2 lines
Diff to previous 1.10 (unified)
Revision 1.10 / (download) - annotate - [select for diffs], Mon May 23 15:17:25 2011 UTC (7 years, 7 months ago) by drochner
CVS Tags: cherry-xenmp-base
Branch point for: cherry-xenmp
Changes since 1.9: +1 -2 lines
Diff to previous 1.9 (unified)
g/c remainders of IV handling in pfkey code -- this is done in opencrypto now
Revision 1.9 / (download) - annotate - [select for diffs], Mon Feb 21 22:28:19 2011 UTC (7 years, 10 months ago) by drochner
CVS Tags: bouyer-quota2-nbase
Changes since 1.8: +8 -8 lines
Diff to previous 1.8 (unified)
treat "struct secpolicyindex" and "struct secasindex" as "const" once they are initialized -- during lifetime, no changes are expected plus some constification of input to comparision functions etc mostly required by the former
Revision 1.8 / (download) - annotate - [select for diffs], Sat Jul 7 18:38:23 2007 UTC (11 years, 6 months ago) by degroote
CVS Tags: yamt-x86pmap-base4, yamt-x86pmap-base3, yamt-x86pmap-base2, yamt-x86pmap-base, yamt-x86pmap, yamt-pf42-baseX, yamt-pf42-base4, yamt-pf42-base3, yamt-pf42-base2, yamt-pf42-base, yamt-pf42, yamt-nfs-mp-base9, yamt-nfs-mp-base8, yamt-nfs-mp-base7, yamt-nfs-mp-base6, yamt-nfs-mp-base5, yamt-nfs-mp-base4, yamt-nfs-mp-base3, yamt-nfs-mp-base2, yamt-nfs-mp-base11, yamt-nfs-mp-base10, yamt-nfs-mp-base, yamt-nfs-mp, yamt-lazymbuf-base15, yamt-lazymbuf-base14, yamt-kmem-base3, yamt-kmem-base2, yamt-kmem-base, yamt-kmem, wrstuden-revivesa-base-4, wrstuden-revivesa-base-3, wrstuden-revivesa-base-2, wrstuden-revivesa-base-1, wrstuden-revivesa-base, wrstuden-revivesa, vmlocking2-base3, vmlocking2-base2, vmlocking2-base1, vmlocking2, vmlocking-nbase, vmlocking-base, uebayasi-xip-base4, uebayasi-xip-base3, uebayasi-xip-base2, uebayasi-xip-base1, uebayasi-xip-base, uebayasi-xip, simonb-wapbl-nbase, simonb-wapbl-base, simonb-wapbl, reinoud-bufcleanup-nbase, reinoud-bufcleanup-base, nick-net80211-sync-base, nick-net80211-sync, nick-hppapmap-base4, nick-hppapmap-base3, nick-hppapmap-base2, nick-hppapmap-base, nick-hppapmap, nick-csl-alignment-base5, nick-csl-alignment-base, nick-csl-alignment, netbsd-5-base, netbsd-5-2-RELEASE, netbsd-5-2-RC1, netbsd-5-2-3-RELEASE, netbsd-5-2-2-RELEASE, netbsd-5-2-1-RELEASE, netbsd-5-2, netbsd-5-1-RELEASE, netbsd-5-1-RC4, netbsd-5-1-RC3, netbsd-5-1-RC2, netbsd-5-1-RC1, netbsd-5-1-5-RELEASE, netbsd-5-1-4-RELEASE, netbsd-5-1-3-RELEASE, netbsd-5-1-2-RELEASE, netbsd-5-1-1-RELEASE, netbsd-5-1, netbsd-5-0-RELEASE, netbsd-5-0-RC4, netbsd-5-0-RC3, netbsd-5-0-RC2, netbsd-5-0-RC1, netbsd-5-0-2-RELEASE, netbsd-5-0-1-RELEASE, netbsd-5-0, netbsd-5, mjf-ufs-trans-base, mjf-devfs2-base, mjf-devfs2, mjf-devfs-base, mjf-devfs, matt-premerge-20091211, matt-nb5-pq3-base, matt-nb5-pq3, matt-nb5-mips64-u2-k2-k4-k7-k8-k9, matt-nb5-mips64-u1-k1-k5, matt-nb5-mips64-premerge-20101231, matt-nb5-mips64-premerge-20091211, matt-nb5-mips64-k15, matt-nb5-mips64, matt-nb4-mips64-k7-u2a-k9b, matt-mips64-premerge-20101231, matt-mips64-base2, matt-mips64-base, matt-mips64, matt-armv6-prevmlocking, matt-armv6-nbase, matt-armv6-base, matt-armv6, keiichi-mipv6-nbase, keiichi-mipv6-base, keiichi-mipv6, jymxensuspend-base, jym-xensuspend-nbase, jym-xensuspend-base, jym-xensuspend, jruoho-x86intr-base, jmcneill-pm-base, jmcneill-pm, jmcneill-base, hpcarm-cleanup-nbase, hpcarm-cleanup-base, hpcarm-cleanup, haad-nbase2, haad-dm-base2, haad-dm-base1, haad-dm-base, haad-dm, cube-autoconf-base, cube-autoconf, bouyer-xeni386-nbase, bouyer-xeni386-merge1, bouyer-xeni386-base, bouyer-xeni386, bouyer-xenamd64-base2, bouyer-xenamd64-base, bouyer-xenamd64, bouyer-quota2-base, ad-socklock-base1, ad-audiomp2-base, ad-audiomp2
Branch point for: rmind-uvmplock, jruoho-x86intr, bouyer-quota2
Changes since 1.7: +29 -34 lines
Diff to previous 1.7 (unified)
Ansify Remove useless extern bzero -> memset, bcopy -> memcpy No functionnal changes
Revision 1.7 / (download) - annotate - [select for diffs], Wed Jun 27 20:38:33 2007 UTC (11 years, 6 months ago) by degroote
Changes since 1.6: +12 -4 lines
Diff to previous 1.6 (unified)
Add support for options IPSEC_NAT_T (RFC 3947 and 3948) for fast_ipsec(4). No objection on tech-net@
Revision 1.6 / (download) - annotate - [select for diffs], Sun Mar 4 06:03:29 2007 UTC (11 years, 10 months ago) by christos
CVS Tags: yamt-idlelwp-base8, thorpej-atomic-base, thorpej-atomic, reinoud-bufcleanup
Branch point for: vmlocking, mjf-ufs-trans
Changes since 1.5: +2 -2 lines
Diff to previous 1.5 (unified)
Kill caddr_t; there will be some MI fallout, but it will be fixed shortly.
Revision 1.5 / (download) - annotate - [select for diffs], Sun Feb 18 13:55:26 2007 UTC (11 years, 11 months ago) by degroote
CVS Tags: ad-audiomp-base, ad-audiomp
Changes since 1.4: +3 -3 lines
Diff to previous 1.4 (unified)
Constify the code following the dyoung change ( the "bug" was hidden by the extern declaration ). While here, remove a Kame ifdef which is useless in netipsec code
Revision 1.4 / (download) - annotate - [select for diffs], Sat Dec 10 23:44:08 2005 UTC (13 years, 1 month ago) by elad
CVS Tags: yamt-uio_vmspace-base5, yamt-uio_vmspace, yamt-splraiseipl-base5, yamt-splraiseipl-base4, yamt-splraiseipl-base3, yamt-splraiseipl-base2, yamt-splraiseipl-base, yamt-splraiseipl, yamt-pdpolicy-base9, yamt-pdpolicy-base8, yamt-pdpolicy-base7, yamt-pdpolicy-base6, yamt-pdpolicy-base5, yamt-pdpolicy-base4, yamt-pdpolicy-base3, yamt-pdpolicy-base2, yamt-pdpolicy-base, yamt-pdpolicy, wrstuden-fixsa-newbase, wrstuden-fixsa-base-1, wrstuden-fixsa-base, wrstuden-fixsa, simonb-timecounters-base, simonb-timecounters, simonb-timcounters-final, rpaulo-netinet-merge-pcb-base, rpaulo-netinet-merge-pcb, post-newlock2-merge, peter-altq-base, peter-altq, newlock2-nbase, newlock2-base, newlock2, netbsd-4-base, netbsd-4-0-RELEASE, netbsd-4-0-RC5, netbsd-4-0-RC4, netbsd-4-0-RC3, netbsd-4-0-RC2, netbsd-4-0-RC1, netbsd-4-0-1-RELEASE, netbsd-4-0, netbsd-4, matt-nb4-arm-base, matt-nb4-arm, ktrace-lwp-base, gdamore-uart-base, gdamore-uart, elad-kernelauth-base, elad-kernelauth, chap-midi-nbase, chap-midi-base, chap-midi, abandoned-netbsd-4-base, abandoned-netbsd-4
Branch point for: yamt-idlelwp
Changes since 1.3: +2 -2 lines
Diff to previous 1.3 (unified)
Multiple inclusion protection, as suggested by christos@ on tech-kern@ few days ago.
Revision 1.3 / (download) - annotate - [select for diffs], Sat Feb 26 22:45:13 2005 UTC (13 years, 10 months ago) by perry
CVS Tags: yamt-vop-base3, yamt-vop-base2, yamt-vop-base, yamt-vop, yamt-readahead-pervnode, yamt-readahead-perfile, yamt-readahead-base3, yamt-readahead-base2, yamt-readahead-base, yamt-readahead, yamt-km-base4, yamt-km-base3, thorpej-vnode-attr-base, thorpej-vnode-attr, netbsd-3-base, netbsd-3-1-RELEASE, netbsd-3-1-RC4, netbsd-3-1-RC3, netbsd-3-1-RC2, netbsd-3-1-RC1, netbsd-3-1-1-RELEASE, netbsd-3-1, netbsd-3-0-RELEASE, netbsd-3-0-RC6, netbsd-3-0-RC5, netbsd-3-0-RC4, netbsd-3-0-RC3, netbsd-3-0-RC2, netbsd-3-0-RC1, netbsd-3-0-3-RELEASE, netbsd-3-0-2-RELEASE, netbsd-3-0-1-RELEASE, netbsd-3-0, netbsd-3, kent-audio2-base
Branch point for: yamt-lazymbuf
Changes since 1.2: +2 -2 lines
Diff to previous 1.2 (unified)
nuke trailing whitespace
Revision 1.2 / (download) - annotate - [select for diffs], Tue Mar 2 02:22:56 2004 UTC (14 years, 10 months ago) by thorpej
CVS Tags: yamt-km-base2, yamt-km-base, netbsd-2-base, netbsd-2-1-RELEASE, netbsd-2-1-RC6, netbsd-2-1-RC5, netbsd-2-1-RC4, netbsd-2-1-RC3, netbsd-2-1-RC2, netbsd-2-1-RC1, netbsd-2-1, netbsd-2-0-base, netbsd-2-0-RELEASE, netbsd-2-0-RC5, netbsd-2-0-RC4, netbsd-2-0-RC3, netbsd-2-0-RC2, netbsd-2-0-RC1, netbsd-2-0-3-RELEASE, netbsd-2-0-2-RELEASE, netbsd-2-0-1-RELEASE, netbsd-2-0, netbsd-2, kent-audio1-beforemerge, kent-audio1-base, kent-audio1
Branch point for: yamt-km, ktrace-lwp, kent-audio2
Changes since 1.1: +5 -1 lines
Diff to previous 1.1 (unified)
Bring the PCB policy cache over from KAME IPsec, including the "hint" used to short-circuit IPsec processing in other places. This is enabled only for NetBSD at the moment; in order for it to function correctly, ipsec_pcbconn() must be called as appropriate.
Revision 1.1 / (download) - annotate - [select for diffs], Wed Aug 13 20:06:51 2003 UTC (15 years, 5 months ago) by jonathan
Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. Fast-IPsec is a rework of the OpenBSD and KAME IPsec code, using the OpenCryptoFramework (and thus hardware crypto accelerators) and numerous detailed performance improvements. This import is (aside from SPL-level names) the FreeBSD source, imported ``as-is'' as a historical snapshot, for future maintenance and comparison against the FreeBSD source. For now, several minor kernel-API differences are hidden by macros a shim file, ipsec_osdep.h, which (aside from SPL names) can be targeted at either NetBSD or FreeBSD.
This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.