FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=release%2F9.3.0 2014-04-07T12:59:17Z 2014-04-07T12:59:17Z Andrey V. Elsukov ae@FreeBSD.org 2014-04-07T12:59:17Z urn:sha1:9b3891bf3e101a7b1ffa826b723ac2fba4c50926 Don't generate an ICMPv6 error message if packet was consumed by filter. Remove unused label. Sponsored by: Yandex LLC 2013-07-04T08:57:13Z Andrey V. Elsukov ae@FreeBSD.org 2013-07-04T08:57:13Z urn:sha1:f481828c484e8704a0826074079773e8477d6a91 Use IPSECSTAT_INC() and IPSEC6STAT_INC() macros for ipsec statistics accounting. 2013-04-29T10:52:45Z Andrey V. Elsukov ae@FreeBSD.org 2013-04-29T10:52:45Z urn:sha1:d00fb9ac60275809d50971558273204e36fced84 Use IP6STAT_INC/IP6STAT_DEC macros to update ip6 stats. MFC r249528,249546: Add accounting to the source address selection algorithm for cases, when it fails to select an address, also add several another counters to the statistics. MFC r249543,249552: Replace hardcoded numbers. MFC r249544: Use IP6S_M2MMAX macro. MFC r249545: Replace hardcoded numbers. Also use interface-local scope name instead of node-local. 2012-11-27T01:59:51Z Andrey V. Elsukov ae@FreeBSD.org 2012-11-27T01:59:51Z urn:sha1:379401c4319c2a8f4118215cafb6dede82462a6d Remove the IPFIREWALL_FORWARD kernel option and make possible to turn on the related functionality in the runtime via the sysctl variable net.pfil.forward. It is turned off by default. MFC r242082: Note the removal of the IPFIREWALL_FORWARD kernel option. MFC r242463: Remove the recently added sysctl variable net.pfil.forward. Instead, add protocol specific mbuf flags M_IP_NEXTHOP and M_IP6_NEXTHOP. Use them to indicate that the mbuf's chain contains the PACKET_TAG_IPFORWARD tag. And do a tag lookup only when this flag is set. 2012-07-08T16:00:45Z Michael Tuexen tuexen@FreeBSD.org 2012-07-08T16:00:45Z urn:sha1:eabc603cde830c2b4c667bd6fac1a31c891a982a Seperate SCTP checksum offloading for IPv4 and IPv6. While there: remove some trainling whitespaces. Approved by: re@ 2012-07-08T14:21:36Z Bjoern A. Zeeb bz@FreeBSD.org 2012-07-08T14:21:36Z urn:sha1:da1a8f1ea29126bee8e41719c5fb2c633ba2c86f It turns out that too many drivers are not only parsing the L2/3/4 headers for TSO but also for generic checksum offloading. Ideally we would only have one common function shared amongst all drivers, and perhaps when updating them for IPv6 we should introduce that. Eventually we should provide the meta information along with mbufs to avoid (re-)parsing entirely. To not break IPv6 (checksums and offload) and to be able to MFC the changes without risking to hurt 3rd party drivers, duplicate the v4 framework, as other OSes have done as well. Introduce interface capability flags for TX/RX checksum offload with IPv6, to allow independent toggling (where possible). Add CSUM_*_IPV6 flags for UDP/TCP over IPv6, and reserve further for SCTP, and IPv6 fragmentation. Define CSUM_DELAY_DATA_IPV6 as we do for legacy IP and add an alias for CSUM_DATA_VALID_IPV6. This pretty much brings IPv6 handling in line with IPv4. TSO is still handled in a different way and not via if_hwassist. Update ifconfig to allow (un)setting of the new capability flags. Update loopback to announce the new capabilities and if_hwassist flags. Individual driver updates will have to follow, as will SCTP. Removed the IFCAP_ prefix when printing the IPv6 checksum capabilities. Approved by: re 2012-07-08T11:53:13Z Bjoern A. Zeeb bz@FreeBSD.org 2012-07-08T11:53:13Z urn:sha1:99ecf29017500d176ca38e42c728ccb2ac2c8cc1 Add support for delayed checksum calculations in the IPv6 output path. We currently cannot offload to the card if we add extension headers (which incl. fragmentation). Fix two SCTP offload support copy&paste bugs: calculate checksums if fragmenting and no need to flag IPv4 header checksums in the IPv6 forwarding path. Correctly get the payload length in host byte order. While we already plan to support >64k payload here, the IPv6 header payload length obviously is only 16 bit and the calculations need to be right. Approved by: re 2012-02-29T09:47:26Z Bjoern A. Zeeb bz@FreeBSD.org 2012-02-29T09:47:26Z urn:sha1:6a9d575377648b74e26b707fd6c6d2c297df99d0 Merge multi-FIB IPv6 support. Extend the so far IPv4-only support for multiple routing tables (FIBs) introduced in r178888 to IPv6 providing feature parity. This includes an extended rtalloc(9) KPI for IPv6, the necessary adjustments to the network stack, and user land support as in netstat. Sponsored by: Cisco Systems, Inc. 2011-08-20T17:05:11Z Bjoern A. Zeeb bz@FreeBSD.org 2011-08-20T17:05:11Z urn:sha1:8a006adb24414b61097ec694cc28fb15de51ac2e Distinguish IPv4 and IPv6 addresses and optional port numbers in user space to set the option for the correct protocol family. Add support in the kernel for carrying the new IPv6 destination address and port. Add support to TCP and UDP for IPv6 and fix UDP IPv4 to not change the address in the IP header. Add support for IPv6 forwarding to a non-local destination. Add a regession test uitilizing VIMAGE to check all 20 possible combinations I could think of. Obtained from: David Dolson at Sandvine Incorporated (original version for ipfw fwd IPv6 support) Sponsored by: Sandvine Incorporated PR: bin/117214 MFC after: 4 weeks Approved by: re (kib) 2009-10-11T05:59:43Z Julian Elischer julian@FreeBSD.org 2009-10-11T05:59:43Z urn:sha1:0b4b0b0feea2734cdf46d8542dee3cc4a56fa52b packet filters. ALso allows ipfw to be enabled on on ejail and disabled on another. In 8.0 it's a global setting. Sitting aroung in tree waiting to commit for: 2 months MFC after: 2 months