summaryrefslogtreecommitdiff
path: root/sys/netipsec/ipsec_output.c
AgeCommit message (Expand)Author
2025-03-04netinet: allow per protocol random IP id control, single out IPSECacazuc
2025-01-13ipsec: allow it to work with unmapped mbufsKonstantin Belousov
2024-11-25ipsec: fix IPv6 over IPv4 tunneling.Andrey V. Elsukov
2024-07-12ipsec_offload: offload inner checksums calculations for UDP/TCP/TSOKonstantin Belousov
2024-07-12ipsec_offload: kernel infrastructureKonstantin Belousov
2024-07-12ipsec_output(): add mtu argumentKonstantin Belousov
2024-07-12ipsec_output(): add outcoming ifp argumentKonstantin Belousov
2024-01-16Add UDP encapsulation of ESP in IPv6Xavier Beaudouin
2023-08-16sys: Remove $FreeBSD$: two-line .h patternWarner Losh
2023-05-12spdx: The BSD-2-Clause-FreeBSD identifier is obsolete, drop -FreeBSDWarner Losh
2022-12-07tcp: embed inpcb into tcpcbGleb Smirnoff
2022-10-03netipsec: move specific ipsecmethods declarations to ipsec_support.hGleb Smirnoff
2022-04-13ipsec_encap: setdf is only used for INET.John Baldwin
2021-11-24netinet: Remove unneeded mb_unmapped_to_ext() callsMark Johnston
2021-11-16sctp: Remove now-unneeded mb_unmapped_to_ext() callsMark Johnston
2021-09-27ipsec: fix typo part2Wojciech Macek
2021-09-27ipsec: fix typo in commentWojciech Macek
2021-09-24ipsec: Add support for PMTUD for IPv6 tunnelsBartlomiej Grzesik
2021-09-24ipsec: If no PMTU in hostcache assume it's equal to link's MTUBartlomiej Grzesik
2021-09-24ipsec: Add PMTUD support for IPsec IPv4 over IPv6 tunnelBartlomiej Grzesik
2021-08-13ipsec: Return error code if no matching SA was foundKornel Duleba
2021-08-13ipsec: Check PMTU before sending a frame.Kornel Duleba
2021-01-19Convert unmapped mbufs before computing checksums in IPsec.John Baldwin
2020-09-01net: clean up empty lines in .c and .h filesMateusz Guzik
2020-06-25Enter and exit the network epoch for async IPsec callbacks.John Baldwin
2020-06-18Add the SCTP_SUPPORT kernel option.Mark Johnston
2017-11-27sys: general adoption of SPDX licensing ID tags.Pedro F. Giffuni
2017-08-21Fix the regression introduced in r275710.Andrey V. Elsukov
2017-07-31Add inpcb pointer to struct ipsec_ctx_data and pass it to the pfil hookAndrey V. Elsukov
2017-05-29Disable IPsec debugging code by default when IPSEC_DEBUG kernel optionAndrey V. Elsukov
2017-05-23Fix possible double releasing for SA and SP references.Andrey V. Elsukov
2017-02-06Merge projects/ipsec into head/.Andrey V. Elsukov
2016-05-03sys/net*: minor spelling fixes.Pedro F. Giffuni
2016-03-18Fix handling of net.inet.ipsec.dfbit=2 variable.Andrey V. Elsukov
2015-11-25Overhaul if_enc(4) and make it loadable in run-time.Andrey V. Elsukov
2015-09-30Take extra reference to security policy before calling crypto_dispatch().Andrey V. Elsukov
2015-07-30Correct IPSec SA statistic keepingErmal Luçi
2015-04-28Fix the comment. We will not do SPD lookup again, becauseAndrey V. Elsukov
2015-04-28Since PFIL can change mbuf pointer, we should update pointers afterAndrey V. Elsukov
2015-04-27Fix possible use after free due to security policy deletion.Andrey V. Elsukov
2015-04-18Change ipsec_address() and ipsec_logsastr() functions to take twoAndrey V. Elsukov
2015-04-18Fix handling of scoped IPv6 addresses in IPSec code.Andrey V. Elsukov
2015-04-18Remove xform_ipip.c and code related to XF_IP4.Andrey V. Elsukov
2014-12-11Remove flags and tunalready arguments from ipsec4_process_packet()Andrey V. Elsukov
2014-12-02Remove route chaching support from ipsec code. It isn't used for some time.Andrey V. Elsukov
2014-11-13Count statistics for the specific address family.Andrey V. Elsukov
2014-11-12ipsec6_process_packet is called before ip6_output fixes ip6_plen.Andrey V. Elsukov
2014-11-12Fix ips_out_nosa errors accounting.Andrey V. Elsukov
2014-09-19Mechanically convert to if_inc_counter().Gleb Smirnoff
2014-07-01The assumption in ipsec4_process_packet() that the payload may beMarko Zec