aboutsummaryrefslogtreecommitdiff
path: root/sys/netipsec
Commit message (Expand)AuthorAgeFilesLines
* ipsec offload: ipsec_accel_fill_xh() should indirect through fn pointerKonstantin Belousov2025-07-173-5/+21
* ipsec offload: make hw-decrypted plain text packet like sw decrypted.Konstantin Belousov2025-07-171-2/+4
* ipsec offload: add xform_history to the ipsec_accel_in_tagKonstantin Belousov2025-07-171-0/+2
* ipsec_offload: pre-calculate xform_history for recorded accelerated SAKonstantin Belousov2025-07-172-0/+25
* machine/stdarg.h -> sys/stdarg.hBrooks Davis2025-06-114-6/+4
* ipsec(4): Fix a typo in a source code commentGordon Bergling2025-05-311-1/+1
* pfkey2: use correct value for a key lengthAndrey V. Elsukov2025-03-061-5/+14
* netinet: allow per protocol random IP id control, single out IPSECacazuc2025-03-043-1/+8
* ipsec: allow it to work with unmapped mbufsKonstantin Belousov2025-01-136-81/+115
* netipsec: Pass the right mbuf upMark Johnston2025-01-061-1/+1
* pfkey: Fix some checks in kdebug_sadb()Tobias Heider2024-12-041-3/+3
* ipsec: fix IPv6 over IPv4 tunneling.Andrey V. Elsukov2024-11-251-10/+4
* net: Include private header in more needed placesJustin Hibbits2024-11-131-0/+1
* ipsec: Drain async ipsec_offload work when destroying a vnetMark Johnston2024-09-042-1/+4
* ipsec offload: use private taskqueue threadKonstantin Belousov2024-09-041-6/+14
* ipsec_offlad: remove not needed IFP_HS_INPUT/OUTPUT flagsKonstantin Belousov2024-09-041-4/+1
* ipsec_accel_output(): do not process packet if interface rejected offloadKonstantin Belousov2024-09-041-1/+2
* Revert "ipsec: Drain async ipsec_offload work when destroying a vnet"Mark Johnston2024-08-302-4/+1
* ipsec: Drain async ipsec_offload work when destroying a vnetMark Johnston2024-08-302-1/+4
* netipsec: add probe points for the ipsec/esp/ah/ipcomp countersKristof Provost2024-08-287-16/+51
* ipsec_offload: add ipsec_accel_drv_sa_lifetime_fetch()Konstantin Belousov2024-08-203-0/+48
* ipsec_offload: add handler for interface down eventsKonstantin Belousov2024-08-201-0/+17
* ipsec_offload: indirect two more functions on the ipsec.ko module loadKonstantin Belousov2024-07-303-4/+42
* ipsec_offload: hide SA/SP offload lifecycle prints under verbose sysctlKonstantin Belousov2024-07-211-17/+41
* netipsec: move declaration of the sysctl net.inet{,6}.ipsec nodes to headerKonstantin Belousov2024-07-212-4/+4
* netinet/ipsec.h: remove unneeded "extern"sKonstantin Belousov2024-07-211-9/+9
* ipsec_offload: switch TF2_IPSEC_TSO on/off as appropriate on outputKonstantin Belousov2024-07-121-8/+25
* ipsec_offload: offload inner checksums calculations for UDP/TCP/TSOKonstantin Belousov2024-07-123-45/+57
* ipsec_offload: kernel infrastructureKonstantin Belousov2024-07-1211-17/+1622
* ipsec_output(): add mtu argumentKonstantin Belousov2024-07-125-27/+29
* ipsec_output(): add outcoming ifp argumentKonstantin Belousov2024-07-125-39/+50
* netipsec/xform_esp.c: make esp_ctr_compatibility globalKonstantin Belousov2024-07-122-2/+3
* ipsec: make key_do_allocsp() globalKonstantin Belousov2024-07-122-1/+1
* libipsec: make const-correctLexi Winter2024-04-231-3/+3
* sys/netipsec: fix IPSEC_SUPPORT for non-INET kernelsLexi Winter2024-04-121-9/+9
* ipsec esp: avoid dereferencing freed secasindexKonstantin Belousov2024-02-261-0/+7
* netipsec: fix LINT-NOINET buildKristof Provost2024-01-201-1/+3
* Fix KASSERT in 80044c78 causing build failuresAllan Jude2024-01-161-2/+2
* Add UDP encapsulation of ESP in IPv6Xavier Beaudouin2024-01-166-68/+263
* sockets: provide correct pr_shutdown for keysock and SDPGleb Smirnoff2024-01-161-2/+17
* sys: Automated cleanup of cdefs and other formattingWarner Losh2023-11-272-2/+0
* sys: Remove $FreeBSD$: one-line .c patternWarner Losh2023-08-166-12/+0
* sys: Remove $FreeBSD$: one-line .c comment patternWarner Losh2023-08-1621-21/+0
* sys: Remove $FreeBSD$: two-line .h patternWarner Losh2023-08-163-6/+0
* tcp: fix TCP MD5 digest computation for TCP over UDPMichael Tuexen2023-06-211-4/+16
* ipsec: Make algorithm tables read-onlyMark Johnston2023-06-021-3/+3
* spdx: The BSD-2-Clause-FreeBSD identifier is obsolete, drop -FreeBSDWarner Losh2023-05-122-2/+2
* netipsec/key.c: use designated initializers for arraysKonstantin Belousov2023-04-251-84/+84
* netipsec: some styleKonstantin Belousov2023-04-252-16/+15
* ipsec: only update lastused when it changesMateusz Guzik2023-02-161-1/+4