src/sys/netinet, branch mainFreeBSD source treehttps://cgit-dev.freebsd.org/src/atom?h=main2026-04-04T23:10:45ZFix nooptions VIMAGE build2026-04-04T23:10:45ZAndrew Gallatingallatin@FreeBSD.org2026-04-04T23:10:45Zurn:sha1:3f79bc9ca336f634e1afa262ccf5155882550a8a
The recent FIBify commits deref struct thread without including
sys/proc.h, which can result in a compiler error. This becomes
apparent when building with LINT-NOVIMAGE, as net/vnet.h includes
sys/proc.h. Fix this by directly including sys/proc.h
Fixes: 4c486fe40267 ("ip_mroute: FIBify"), 0bb9c2b665d9 ("ip6_mroute: FIBify")
tcp: retire TF_SENTSYN2026-04-03T19:22:11ZMichael Tuexentuexen@FreeBSD.org2026-04-03T19:22:11Zurn:sha1:32cc4beb0a8c3cadc0de4c255ba512fd7b196607
This TF_-flag is only used in the RACK stack and not really needed.
So replace it, since glebius@ needs a TF_ flag and right now all
of them are taken.
No functional change intended.
Reviewed by: rrs, glebius, rscheff, Nick Banks
Sponsored by: Netflix, Inc.
Differential Revision: https://reviews.freebsd.org/D56025
ip_mroute: FIBify2026-03-30T16:08:21ZMark Johnstonmarkj@FreeBSD.org2026-03-30T13:31:29Zurn:sha1:4c486fe402673c49443293cfb70ad4da61d39916
Modify the control plane (ioctl and socket option handlers) to use the
routing socket FIB to index into the mfctable array. Modify the
forwarding plane to use the mbuf's FIB to determine which routing table
to use.
MFC after: 2 weeks
Sponsored by: Stormshield
Sponsored by: Klara, Inc.
Differential Revision: https://reviews.freebsd.org/D55241
ip(6)_mroute: Grow the routing tables when the number of FIBs changes2026-03-30T16:08:21ZMark Johnstonmarkj@FreeBSD.org2026-03-30T13:30:38Zurn:sha1:97a4bc9a0da7cd63c660ce59a9dd7c87efe1f218
Use the new rtnumfibs_change event to expand the mfctable array when the
number of FIBs increases.
MFC after: 2 weeks
Sponsored by: Stormshield
Sponsored by: Klara, Inc.
Differential Revision: https://reviews.freebsd.org/D55240
ip_mroute: Start moving globals into a structure2026-03-30T16:08:20ZMark Johnstonmarkj@FreeBSD.org2026-03-30T13:27:52Zurn:sha1:d50d0c002b982f193e36ede9fa2669d5dcf8467b
I would like to support per-FIB multicast routing tables, such that one
can run a routing daemon per-FIB, with each daemon oblivious to the
existence of others. Currently the multicast routing code is completely
unaware of FIBs.
To that end, start collecting various global variables in ip_mroute.c
into a per-VNET struct mfctable. In a future patch this will be
expanded into an array of mfctable structures, one per FIB. For now,
all of the state is collected into V_mfctables[0].
Each mfctable contains, among other things:
- a pointer to the routing socket, if routing is enabled,
- a hash table of routing cache entries,
- an table of network interfaces participating in the routing
configuration
This change has no functional effect, it is just factoring out these
global variables to make the subsequent patches simpler.
MFC after: 2 weeks
Sponsored by: Stormshield
Sponsored by: Klara, Inc.
Differential Revision: https://reviews.freebsd.org/D55237
routing: Retire ROUTE_MPATH compile option2026-03-27T20:25:33ZPouria Mousavizadeh Tehranipouria@FreeBSD.org2026-03-27T11:20:05Zurn:sha1:254b23eb1f540844cf2a90f2781ae4231c5701ce
The ROUTE_MPATH compile option was introduced to
test the new multipath implementation.
Since compiling it has no overhead and it's enabled
by default, remove it.
Reviewed by: melifaro, markj
Relnotes: yes
Differential Revision: https://reviews.freebsd.org/D55884
tcp: plug an mbuf leak2026-03-26T01:11:54ZMichael Tuexentuexen@FreeBSD.org2026-03-25T05:53:56Zurn:sha1:6b2d6ccad2552e46a5c9c3ba70b2d0ed27c70ca8
When a challenge ACK should be sent via tcp_send_challenge_ack(),
but the rate limiter suppresses the sending, free the mbuf chain.
The caller of tcp_send_challenge_ack() expects this similar to the
callers of tcp_respond().
Approved by: so
Security: FreeBSD-SA-26:06.tcp
Security: CVE-2026-4247
Reviewed by: lstewart
Tested by: lstewart
Sponsored by: Netflix, Inc.
tcp_usrreq: Only allocate TFO counter when required2026-03-24T22:02:45ZPouria Mousavizadeh Tehranipouria@FreeBSD.org2026-03-24T17:54:46Zurn:sha1:769a6f803d1b531d956af8d857e68f2d2d847324
During tcp_usr_listen(), only allocate TFO counter when required.
Reviewed by: tuexen, glebius
Differential Revision: https://reviews.freebsd.org/D56067
tcp: make TCP_TRK_TRACK_FLG_* flags visible to userland programs2026-03-23T21:55:59ZGleb Smirnoffglebius@FreeBSD.org2026-03-23T21:55:59Zurn:sha1:73f72ca08dbb13ad186e6b33420015d51d0d5b17
These flags are used in BBLog entries.
tcp/rack: don't call call tcp_state_change() before tcp_close()2026-03-20T16:55:04ZGleb Smirnoffglebius@FreeBSD.org2026-03-20T16:55:04Zurn:sha1:03b7b779a80557fe769bc00e1b06f4d116df958a
Reviewed by: tuexen, rrs
Differential Revision: https://reviews.freebsd.org/D55969