linux.git/net/core/sysctl_net_core.c, branch v2.6.23

[XFRM]: Allow XFRM_ACQ_EXPIRES to be tunable via sysctl.

2007-05-31T08:23:23+00:00

Signed-off-by: David S. Miller

[XFRM]: Allow packet drops during larval state resolution.

2007-05-25T01:17:54+00:00

The current IPSEC rule resolution behavior we have does not work for a
lot of people, even though technically it's an improvement from the
-EAGAIN buisness we had before.

Right now we'll block until the key manager resolves the route.  That
works for simple cases, but many folks would rather packets get
silently dropped until the key manager resolves the IPSEC rules.

We can't tell these folks to "set the socket non-blocking" because
they don't have control over the non-block setting of things like the
sockets used to resolve DNS deep inside of the resolver libraries in
libc.

With that in mind I coded up the patch below with some help from
Herbert Xu which provides packet-drop behavior during larval state
resolution, controllable via sysctl and off by default.

This lays the framework to either:

1) Make this default at some point or...

2) Move this logic into xfrm{4,6}_policy.c and implement the
   ARP-like resolution queue we've all been dreaming of.
   The idea would be to queue packets to the policy, then
   once the larval state is resolved by the key manager we
   re-resolve the route and push the packets out.  The
   packets would timeout if the rule didn't get resolved
   in a certain amount of time.

Signed-off-by: David S. Miller

[NET]: Replace CONFIG_NET_DEBUG with sysctl.

2007-04-26T05:24:05+00:00

Covert network warning messages from a compile time to runtime choice.
Removes kernel config option and replaces it with new /proc/sys/net/core/warnings.

Signed-off-by: Stephen Hemminger 
Signed-off-by: David S. Miller

[NET]: The scheduled removal of the frame diverter.

2006-12-03T05:22:23+00:00

This patch contains the scheduled removal of the frame diverter.

Signed-off-by: Adrian Bunk 
Signed-off-by: David S. Miller

Remove obsolete #include

2006-06-30T17:25:36+00:00

Signed-off-by: Jörn Engel 
Signed-off-by: Adrian Bunk

[IPSEC]: Sync series - core changes

2006-03-21T03:15:11+00:00

This patch provides the core functionality needed for sync events
for ipsec. Derived work of Krisztian KOVACS 

Signed-off-by: Jamal Hadi Salim 
Signed-off-by: David S. Miller

[NET]: Fix sparse warnings

2005-08-29T23:01:32+00:00

Of this type, mostly:

CHECK   net/ipv6/netfilter.c
net/ipv6/netfilter.c:96:12: warning: symbol 'ipv6_netfilter_init' was not declared. Should it be static?
net/ipv6/netfilter.c:101:6: warning: symbol 'ipv6_netfilter_fini' was not declared. Should it be static?

Signed-off-by: Arnaldo Carvalho de Melo 
Signed-off-by: David S. Miller

[NET]: Separate two usages of netdev_max_backlog.

2005-06-24T03:14:40+00:00

Separate out the two uses of netdev_max_backlog. One controls the
upper bound on packets processed per softirq, the new name for this is
netdev_budget; the other controls the limit on packets queued via
netif_rx.

Increase the max_backlog default to account for faster processors.

Signed-off-by: Stephen Hemminger 
Signed-off-by: David S. Miller

[NET]: Remove obsolete netif_rx congestion sensing mechanism.

2005-06-24T03:10:00+00:00

Remove the congestion sensing mechanism from netif_rx, and always
return either full or empty.  Almost no driver checks the return value
from netif_rx, and those that do only use it for debug messages.

The original design of netif_rx was to do flow control based on the
receive queue, but NAPI has supplanted this and no driver uses the
feedback.

Signed-off-by: Stephen Hemminger 
Signed-off-by: David S. Miller

[NET]: Remove obsolete fastroute stats.

2005-06-24T03:08:59+00:00

Remove last vestiages of fastroute code that is no longer used.

Signed-off-by: Stephen Hemminger 
Signed-off-by: David S. Miller