src/sys/netinet6, branch release/5.2.1FreeBSD source treehttps://cgit-dev.freebsd.org/src/atom?h=release%2F5.2.12004-01-27T15:59:26ZMFC 1.31: fix potential 'cannot-happen' memory leak2004-01-27T15:59:26ZHajimu UMEMOTOume@FreeBSD.org2004-01-27T15:59:26Zurn:sha1:9246cdb43e13f27b1d0c93cb706a80cbecadc239
Approved by: re (scott)
MFC 1.47: call ipsec_pcbconn()/ipsec_pcbdisconn() from in6_pcbconnect().2004-01-27T15:57:16ZHajimu UMEMOTOume@FreeBSD.org2004-01-27T15:57:16Zurn:sha1:0e55c4f224993f7170ef6faab322d56bb4f1e6f4
Approved by: re (scott)
MFC: Make ip6fw reset work for TCP packets with SYN set.2004-01-09T23:54:24ZDavid Malonedwmalone@FreeBSD.org2004-01-09T23:54:24Zurn:sha1:ad52416410f27bf41b3445da4bf56dae84eef983
Approved by: re, sam, ume
MFC Rev 1.712003-12-22T03:04:00ZSUZUKI Shinsukesuz@FreeBSD.org2003-12-22T03:04:00Zurn:sha1:066a685df4a72413fd19878632efffa17dafd7a9
fixed an IPv6 path MTU discovery failure owing to a lack of initialization.
approved by: re(scottl)
Split the "inp" mutex class into separate classes for each of divert,2003-11-26T01:40:44ZSam Lefflersam@FreeBSD.org2003-11-26T01:40:44Zurn:sha1:5bd311a566a2938e4145861740abc6b335b689f7
raw, tcp, udp, raw6, and udp6 sockets to avoid spurious witness
complaints.
Reviewed by: rwatson
Approved by: re (rwatson)
pktopt may be null.2003-11-24T01:53:36ZHajimu UMEMOTOume@FreeBSD.org2003-11-24T01:53:36Zurn:sha1:289b28bd999745344c5623bc4199387697be5c23
Approved by: re (rwatson)
Introduce tcp_hostcache and remove the tcp specific metrics from2003-11-20T21:47:20ZAndre Oppermannandre@FreeBSD.org2003-11-20T21:47:20Zurn:sha1:fc906dd88f37c3196167ff966b5d6e108f67bd40
the routing table. Move all usage and references in the tcp stack
from the routing table metrics to the tcp hostcache.
It caches measured parameters of past tcp sessions to provide better
initial start values for following connections from or to the same
source or destination. Depending on the network parameters to/from
the remote host this can lead to significant speedups for new tcp
connections after the first one because they inherit and shortcut
the learning curve.
tcp_hostcache is designed for multiple concurrent access in SMP
environments with high contention and is hash indexed by remote
ip address.
It removes significant locking requirements from the tcp stack with
regard to the routing table.
Reviewed by: sam (mentor), bms
Reviewed by: -net, -current, core@kame.net (IPv6 parts)
Approved by: re (scottl)
Introduce tcp_hostcache and remove the tcp specific metrics from2003-11-20T20:07:39ZAndre Oppermannandre@FreeBSD.org2003-11-20T20:07:39Zurn:sha1:97d8d152c28bb596e1c310d9842db5d0314207b2
the routing table. Move all usage and references in the tcp stack
from the routing table metrics to the tcp hostcache.
It caches measured parameters of past tcp sessions to provide better
initial start values for following connections from or to the same
source or destination. Depending on the network parameters to/from
the remote host this can lead to significant speedups for new tcp
connections after the first one because they inherit and shortcut
the learning curve.
tcp_hostcache is designed for multiple concurrent access in SMP
environments with high contention and is hash indexed by remote
ip address.
It removes significant locking requirements from the tcp stack with
regard to the routing table.
Reviewed by: sam (mentor), bms
Reviewed by: -net, -current, core@kame.net (IPv6 parts)
Approved by: re (scottl)
Remove RTF_PRCLONING from routing table and adjust users of it2003-11-20T19:47:31ZAndre Oppermannandre@FreeBSD.org2003-11-20T19:47:31Zurn:sha1:26d02ca7babf8bb8d1e2b9c8cb3e18ec0fcd1317
accordingly. The define is left intact for ABI compatibility
with userland.
This is a pre-step for the introduction of tcp_hostcache. The
network stack remains fully useable with this change.
Reviewed by: sam (mentor), bms
Reviewed by: -net, -current, core@kame.net (IPv6 parts)
Approved by: re (scottl)
Introduce a MAC label reference in 'struct inpcb', which caches2003-11-18T00:39:07ZRobert Watsonrwatson@FreeBSD.org2003-11-18T00:39:07Zurn:sha1:a557af222b70694470f63e2a0f1bf58c9dcc73fd
the MAC label referenced from 'struct socket' in the IPv4 and
IPv6-based protocols. This permits MAC labels to be checked during
network delivery operations without dereferencing inp->inp_socket
to get to so->so_label, which will eventually avoid our having to
grab the socket lock during delivery at the network layer.
This change introduces 'struct inpcb' as a labeled object to the
MAC Framework, along with the normal circus of entry points:
initialization, creation from socket, destruction, as well as a
delivery access control check.
For most policies, the inpcb label will simply be a cache of the
socket label, so a new protocol switch method is introduced,
pr_sosetlabel() to notify protocols that the socket layer label
has been updated so that the cache can be updated while holding
appropriate locks. Most protocols implement this using
pru_sosetlabel_null(), but IPv4/IPv6 protocols using inpcbs use
the the worker function in_pcbsosetlabel(), which calls into the
MAC Framework to perform a cache update.
Biba, LOMAC, and MLS implement these entry points, as do the stub
policy, and test policy.
Reviewed by: sam, bms
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories