summaryrefslogtreecommitdiff
path: root/sys/netipsec/ipsec.c
AgeCommit message (Expand)Author
2025-07-17ipsec offload: make hw-decrypted plain text packet like sw decrypted.Konstantin Belousov
2025-03-04netinet: allow per protocol random IP id control, single out IPSECacazuc
2025-01-13ipsec: allow it to work with unmapped mbufsKonstantin Belousov
2024-07-21netipsec: move declaration of the sysctl net.inet{,6}.ipsec nodes to headerKonstantin Belousov
2024-07-12ipsec_offload: kernel infrastructureKonstantin Belousov
2023-08-16sys: Remove $FreeBSD$: one-line .c comment patternWarner Losh
2023-01-18ipsec.c: typos in the commentKonstantin Belousov
2022-11-22ipsec: add key_havesp_anyMateusz Guzik
2022-07-19ipsec: replace SECASVAR mtx by rmlockKristof Provost
2021-08-13ipsec: Check PMTU before sending a frame.Kornel Duleba
2021-08-09ipsec: Handle ICMP NEEDFRAG message.Wojciech Macek
2020-10-16Implement anti-replay algorithm with ESN supportMarcin Wojtas
2020-09-01net: clean up empty lines in .c and .h filesMateusz Guzik
2020-05-02Remove support for IPsec algorithms deprecated in r348205 and r360202.John Baldwin
2020-02-26Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (17 of many)Pawel Biernacki
2019-09-06Fix broken window replay check that will allow old packet to be accepted.Fabien Thomas
2019-06-11Make the warning intervals for deprecated crypto algorithms tunable.John Baldwin
2018-07-24Use the new VNET_DEFINE_STATIC macro when we are defining static VNETAndrew Turner
2018-07-18OpenCrypto: Convert sessions to opaque handles instead of integersConrad Meyer
2018-07-13OCF: Add a typedef for session identifiersConrad Meyer
2018-02-19Remove unused variables and sysctl declaration.Andrey V. Elsukov
2017-11-20sys: further adoption of SPDX licensing ID tags.Pedro F. Giffuni
2017-11-03crypto(9) is called from ipsec in CRYPTO_F_CBIFSYNC mode. This is workingFabien Thomas
2017-08-21Remove stale comments.Andrey V. Elsukov
2017-08-21Fix the regression introduced in r275710.Andrey V. Elsukov
2017-02-06Merge projects/ipsec into head/.Andrey V. Elsukov
2017-01-08Add direction argument to ipsec_setspidx_inpcb() function.Andrey V. Elsukov
2016-11-25IPsec RFC6479 support for replay window sizes up to 2^32 - 32 packets.Fabien Thomas
2016-06-21Get closer to a VIMAGE network stack teardown from top to bottom ratherBjoern A. Zeeb
2016-05-03sys/net*: minor spelling fixes.Pedro F. Giffuni
2016-04-26netipsec: Don't leak memory when deep copy failsConrad Meyer
2016-04-21Constify mbuf pointer for IPSEC functions where mbuf isn't modified.Andrey V. Elsukov
2015-11-25Overhaul if_enc(4) and make it loadable in run-time.Andrey V. Elsukov
2015-10-27Turning on IPSEC used to introduce a slight amount of performanceGeorge V. Neville-Neil
2015-07-03Reduce overhead of IPSEC for traffic generated from hostErmal Luçi
2015-04-27Make ipsec_in_reject() static. We use ipsec[46]_in_reject() instead.Andrey V. Elsukov
2015-04-18Change ipsec_address() and ipsec_logsastr() functions to take twoAndrey V. Elsukov
2014-12-24Rename ip4_def_policy variable to def_policy. It is used by both IPv4 andAndrey V. Elsukov
2014-12-11Treat errors when retrieving security policy as policy violation.Andrey V. Elsukov
2014-12-11Initialize error variable.Andrey V. Elsukov
2014-12-11Remove flag/flags argument from the following functions:Andrey V. Elsukov
2014-12-03Remove __P() macro.Andrey V. Elsukov
2014-12-02Remove route chaching support from ipsec code. It isn't used for some time.Andrey V. Elsukov
2014-11-07Remove SYSCTL_VNET_* macros, and simply put CTLFLAG_VNET where needed.Gleb Smirnoff
2014-04-16Remove _IP_VHL* macros and related ifdefs.Andrey V. Elsukov
2013-10-26The r48589 promised to remove implicit inclusion of if_var.h soon. PrepareGleb Smirnoff
2013-07-09Migrate structs ahstat, espstat, ipcompstat, ipipstat, pfkeystat,Andrey V. Elsukov
2013-06-20Use IPSECSTAT_INC() and IPSEC6STAT_INC() macros for ipsec statisticsAndrey V. Elsukov
2012-10-22 Switch the entire IPv4 stack to keep the IP packet headerGleb Smirnoff
2010-10-30Announce both IPsec and UDP Encap (NAT-T) if available forBjoern A. Zeeb
generated by cgit v1.2.3 (git 2.25.1) at 2026-01-20 11:35:45 +0000