src/sys/net, branch release/4.8.0

MFC 1.46: Implement SIOCGIFMEDIA for vlan devices

2003-02-14T22:25:58Z

MFC:

2003-02-05T18:42:15Z

- bpf is now working (tested with tcpdump) - fix promiscious mode

revert algorithm renumbering done in FAST_IPSEC MFC; this breaks binary

2003-01-31T23:21:01Z

and KAME compatibility Pointed out by: Helge Oldach

MFC: sync Arcnet driver and framework with -current

2003-01-28T11:19:05Z

(most notable addition is IPX support)

MFC: Fast IPsec

2003-01-24T05:11:36Z

"Fast IPsec": this is an experimental IPsec implementation that is derived from the KAME IPsec implementation, but with heavy borrowing and influence of openbsd. A key feature of this implementation is that it uses the kernel crypto framework to do all crypto work so when h/w crypto support is present IPsec operation is automatically accelerated. Otherwise the protocol implementations are rather differet while the SADB and policy management code is very similar to KAME (for the moment). Note that this implementation is enabled with a FAST_IPSEC option. With this you get all protocols; i.e. there is no FAST_IPSEC_ESP option. FAST_IPSEC and IPSEC are mutually exclusive; you cannot build both into a single system. This software is well tested with IPv4 but should be considered very experimental (i.e. do not deploy in production environments). This software does NOT currently support IPv6. In fact do not configure FAST_IPSEC and INET6 in the same system. Supported by: Vernier Networks

MFC: m_tag support

2003-01-23T21:06:48Z

Replace aux mbufs with packet tags: o instead of a list of mbufs use a list of m_tag structures a la openbsd o for netgraph et. al. extend the stock openbsd m_tag to include a 32-bit ABI/module number cookie o for openbsd compatibility define a well-known cookie MTAG_ABI_COMPAT and use this in defining openbsd-compatible m_tag_find and m_tag_get routines o rewrite KAME use of aux mbufs in terms of packet tags o eliminate the most heavily used aux mbufs by adding an additional struct inpcb parameter to ip_output and ip6_output to allow the IPsec code to locate the security policy to apply to outbound packets o bump __FreeBSD_version so code can be conditionalized o fixup ipfilter's call to ip_output based on __FreeBSD_version

MFC: revision 1.73.

2003-01-17T08:04:00Z

Disallow recursive walks in rt_fixchange() and rt_fixdelete(). Do not call rt_fixchange() in the rtrequest(RTM_RESOLVE) case. PR: kern/37606

Re-sync with -HEAD.

2002-12-23T23:02:21Z

Sponsored by: NTT Multimedia Communications Labs

Back out the non-functional pfil(4) hooks for IPFilter; they do not

2002-12-06T05:24:03Z

belong in RELENG_4. Add working, but still somewhat experimental, IPFilter hooks by popular demand.

MFC 1.127: Unconditionally restore the pointer to the saved Ethernet

2002-12-06T05:08:35Z

header after going to bridge.c:bdg_forward(). The header can be munged even if the mbuf does not /appear/ to change. PR: kern/42465