FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=release%2F5.2.1 2004-01-08T16:31:33Z 2004-01-08T16:31:33Z Sam Leffler sam@FreeBSD.org 2004-01-08T16:31:33Z urn:sha1:598a20cc0e6bb34019047496372a01421d7a1917 Approved by: re (scottl) 2003-11-28T18:48:59Z Mike Silbersack silby@FreeBSD.org 2003-11-28T18:48:59Z urn:sha1:d7be4a893c005d0779bc62182638d55c1ecfda34 mpf are allocated on the stack, which causes this check to falsely trigger. A new check which takes on-stack mbufs into account will be reintroduced after 5.2 is out the door. Approved by: re (watson) Requested by: many 2003-11-25T19:52:12Z Sam Leffler sam@FreeBSD.org 2003-11-25T19:52:12Z urn:sha1:72b9c8c9fd33286695cd1bab67c3cf89931b0186 Reviewed by: andre Approved by: re (rwatson) 2003-11-20T20:07:39Z Andre Oppermann andre@FreeBSD.org 2003-11-20T20:07:39Z urn:sha1:97d8d152c28bb596e1c310d9842db5d0314207b2 the routing table. Move all usage and references in the tcp stack from the routing table metrics to the tcp hostcache. It caches measured parameters of past tcp sessions to provide better initial start values for following connections from or to the same source or destination. Depending on the network parameters to/from the remote host this can lead to significant speedups for new tcp connections after the first one because they inherit and shortcut the learning curve. tcp_hostcache is designed for multiple concurrent access in SMP environments with high contention and is hash indexed by remote ip address. It removes significant locking requirements from the tcp stack with regard to the routing table. Reviewed by: sam (mentor), bms Reviewed by: -net, -current, core@kame.net (IPv6 parts) Approved by: re (scottl) 2003-11-20T19:47:31Z Andre Oppermann andre@FreeBSD.org 2003-11-20T19:47:31Z urn:sha1:26d02ca7babf8bb8d1e2b9c8cb3e18ec0fcd1317 accordingly. The define is left intact for ABI compatibility with userland. This is a pre-step for the introduction of tcp_hostcache. The network stack remains fully useable with this change. Reviewed by: sam (mentor), bms Reviewed by: -net, -current, core@kame.net (IPv6 parts) Approved by: re (scottl) 2003-11-18T00:39:07Z Robert Watson rwatson@FreeBSD.org 2003-11-18T00:39:07Z urn:sha1:a557af222b70694470f63e2a0f1bf58c9dcc73fd the MAC label referenced from 'struct socket' in the IPv4 and IPv6-based protocols. This permits MAC labels to be checked during network delivery operations without dereferencing inp->inp_socket to get to so->so_label, which will eventually avoid our having to grab the socket lock during delivery at the network layer. This change introduces 'struct inpcb' as a labeled object to the MAC Framework, along with the normal circus of entry points: initialization, creation from socket, destruction, as well as a delivery access control check. For most policies, the inpcb label will simply be a cache of the socket label, so a new protocol switch method is introduced, pr_sosetlabel() to notify protocols that the socket layer label has been updated so that the cache can be updated while holding appropriate locks. Most protocols implement this using pru_sosetlabel_null(), but IPv4/IPv6 protocols using inpcbs use the the worker function in_pcbsosetlabel(), which calls into the MAC Framework to perform a cache update. Biba, LOMAC, and MLS implement these entry points, as do the stub policy, and test policy. Reviewed by: sam, bms Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories 2003-11-14T21:02:22Z Andre Oppermann andre@FreeBSD.org 2003-11-14T21:02:22Z urn:sha1:9188b4a1696629764d8bab276b82315fd8376a9a Short description of ip_fastforward: o adds full direct process-to-completion IPv4 forwarding code o handles ip fragmentation incl. hw support (ip_flow did not) o sends icmp needfrag to source if DF is set (ip_flow did not) o supports ipfw and ipfilter (ip_flow did not) o supports divert, ipfw fwd and ipfilter nat (ip_flow did not) o returns anything it can't handle back to normal ip_input Enable with sysctl -w net.inet.ip.fastforwarding=1 Reviewed by: sam (mentor) 2003-11-14T20:58:00Z Bruce M Simpson bms@FreeBSD.org 2003-11-14T20:58:00Z urn:sha1:f16770ae7e91af28ae114597582bcee74ddfb856 be printed, if the module were loaded into a kernel which had INET6 enabled. The gre(4) driver does not use INET6, nor is it specified for IPv6. The tunnel_status() function in ifconfig(8) is somewhat overzealous and assumes that all tunnel interfaces speak KAME ifioctls. This fix follows the path of least resistance, by teaching gre(4) about the two KAME ifioctls concerned. PR: bin/56341 2003-11-14T18:48:15Z Bruce M Simpson bms@FreeBSD.org 2003-11-14T18:48:15Z urn:sha1:05b2efe044c9a43a1d0d9d119064d77b762a0461 in a protocol-independent way. Submitted by: harti 2003-11-14T18:17:07Z Hajimu UMEMOTO ume@FreeBSD.org 2003-11-14T18:17:07Z urn:sha1:979ed0d5e6dbc26836572da9d1aeb69e18471440 Obtained from: KAME