src/tests/atf_python/sys/netpfil/ipfw, branch mainFreeBSD source treehttps://cgit-dev.freebsd.org/src/atom?h=main2026-03-01T19:04:58Zipfw: add support for masked ip-address lookups2026-03-01T19:04:58ZBoris Lytochkinlytboris@gmail.com2026-03-01T18:54:24Zurn:sha1:32cd3ee5901ea33d41ff550e5f40ce743c8d4165
Current radix-based implementation of lookup tables in ipfw does
not support non-contiguous prefixes while this type of lookup is
needed to write CPU-effective firewall configurations.
For some of the cases we can reach the goal using a masked table
lookup by adding masked (e.g. zero non-significant bits) records
into a table and then zero non-significant bits in lookup key
prior to making a table lookup.
Obtained from: Yandex LLC
MFC after: 3 weeks
Relnotes: yes
Sponsored by: Yandex LLC
Differential Revision: https://reviews.freebsd.org/D53694
tests/ipfw: Update regression tests to match new 32-bit size rule numbers2025-10-03T11:06:49ZOlivier Cochardolivier@FreeBSD.org2025-10-03T10:56:27Zurn:sha1:01d5a6f30ce8f5006bd9d5528a487ef4d79c48c3
Commit 4a77657cbc01 increased the size of several opcodes to ipfw_insn_u32.
Approved by: ae
Sponsored by: Netflix
Differential Revision: https://reviews.freebsd.org/D52876
tests: move atf_python/sys/ into the tests package2024-04-19T18:48:37ZLexi Winterlexi@le-Fay.ORG2024-04-16T11:18:23Zurn:sha1:e1e636193db45630c7881246d25902e57c43d24e
Reviewed by: markj
MFC after: 1 week
Pull Request: https://github.com/freebsd/freebsd-src/pull/1174
ipfw: add eaction tests2023-06-15T06:36:16ZAlexander V. Chernikovmelifaro@FreeBSD.org2023-06-15T06:36:16Zurn:sha1:84b41342da1ff3b9cf4eb785752201575c5e4391
MFC after: 2 weeks
ipfw(8): add ioctl/instruction generation tests2023-06-13T11:55:37ZAlexander V. Chernikovmelifaro@FreeBSD.org2023-06-11T08:12:04Zurn:sha1:9f44a47fd07924afc035991af15d84e6585dea4f
Differential Revision: https://reviews.freebsd.org/D40488
MFC after: 2 weeks