Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
NetBSD/sys/netipsec/ipsec6.h

108 lines
4.0 KiB
C
Raw Normal View History

Dynamic sysctl. Gone are the old kern_sysctl(), cpu_sysctl(), hw_sysctl(), vfs_sysctl(), etc, routines, along with sysctl_int() et al. Now all nodes are registered with the tree, and nodes can be added (or removed) easily, and I/O to and from the tree is handled generically. Since the nodes are registered with the tree, the mapping from name to number (and back again) can now be discovered, instead of having to be hard coded. Adding new nodes to the tree is likewise much simpler -- the new infrastructure handles almost all the work for simple types, and just about anything else can be done with a small helper function. All existing nodes are where they were before (numerically speaking), so all existing consumers of sysctl information should notice no difference. PS - I'm sorry, but there's a distinct lack of documentation at the moment. I'm working on sysctl(3/8/9) right now, and I promise to watch out for buses.
2003-12-04 22:38:21 +03:00
/* $NetBSD: ipsec6.h,v 1.3 2003/12/04 19:38:24 atatat Exp $ */
Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. Fast-IPsec is a rework of the OpenBSD and KAME IPsec code, using the OpenCryptoFramework (and thus hardware crypto accelerators) and numerous detailed performance improvements. This import is (aside from SPL-level names) the FreeBSD source, imported ``as-is'' as a historical snapshot, for future maintenance and comparison against the FreeBSD source. For now, several minor kernel-API differences are hidden by macros a shim file, ipsec_osdep.h, which (aside from SPL names) can be targeted at either NetBSD or FreeBSD.
2003-08-14 00:06:49 +04:00
/* $FreeBSD: src/sys/netipsec/ipsec6.h,v 1.1.4.1 2003/01/24 05:11:35 sam Exp $ */
/* $KAME: ipsec.h,v 1.44 2001/03/23 08:08:47 itojun Exp $ */
/*
* Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in the
* documentation and/or other materials provided with the distribution.
* 3. Neither the name of the project nor the names of its contributors
* may be used to endorse or promote products derived from this software
* without specific prior written permission.
*
* THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
* ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
* SUCH DAMAGE.
*/
/*
* IPsec controller part.
*/
#ifndef _NETIPSEC_IPSEC6_H_
#define _NETIPSEC_IPSEC6_H_
#include <net/pfkeyv2.h>
#include <netipsec/keydb.h>
This file was derived from FreeBSD, where "in6pcb" is a macro for "inpcb", and this struct inpcb* and struct inp6cb* are the same type. On NetBSD they are different types, so we must change the types of formal argument in IPv6-specific functions from "struct inpcb *" to "struct in6pcb*". The code didn't compile on NetBSD beforehand, if both FAST_IPSEC + INET6 were configured. This fix will cause even more short-term breakage for that case, but its a step in the right direction: it shows up what still needs to be fixed.
2003-11-20 09:35:09 +03:00
#ifdef __NetBSD__
#include <netinet6/in6_pcb.h>
#endif
Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. Fast-IPsec is a rework of the OpenBSD and KAME IPsec code, using the OpenCryptoFramework (and thus hardware crypto accelerators) and numerous detailed performance improvements. This import is (aside from SPL-level names) the FreeBSD source, imported ``as-is'' as a historical snapshot, for future maintenance and comparison against the FreeBSD source. For now, several minor kernel-API differences are hidden by macros a shim file, ipsec_osdep.h, which (aside from SPL names) can be targeted at either NetBSD or FreeBSD.
2003-08-14 00:06:49 +04:00
#ifdef _KERNEL
extern int ip6_esp_trans_deflev;
extern int ip6_esp_net_deflev;
extern int ip6_ah_trans_deflev;
extern int ip6_ah_net_deflev;
extern int ip6_ipsec_ecn;
extern int ip6_esp_randpad;
This file was derived from FreeBSD, where "in6pcb" is a macro for "inpcb", and this struct inpcb* and struct inp6cb* are the same type. On NetBSD they are different types, so we must change the types of formal argument in IPv6-specific functions from "struct inpcb *" to "struct in6pcb*". The code didn't compile on NetBSD beforehand, if both FAST_IPSEC + INET6 were configured. This fix will cause even more short-term breakage for that case, but its a step in the right direction: it shows up what still needs to be fixed.
2003-11-20 09:35:09 +03:00
extern struct secpolicy ip6_def_policy;
Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. Fast-IPsec is a rework of the OpenBSD and KAME IPsec code, using the OpenCryptoFramework (and thus hardware crypto accelerators) and numerous detailed performance improvements. This import is (aside from SPL-level names) the FreeBSD source, imported ``as-is'' as a historical snapshot, for future maintenance and comparison against the FreeBSD source. For now, several minor kernel-API differences are hidden by macros a shim file, ipsec_osdep.h, which (aside from SPL names) can be targeted at either NetBSD or FreeBSD.
2003-08-14 00:06:49 +04:00
struct inpcb;
This file was derived from FreeBSD, where "in6pcb" is a macro for "inpcb", and this struct inpcb* and struct inp6cb* are the same type. On NetBSD they are different types, so we must change the types of formal argument in IPv6-specific functions from "struct inpcb *" to "struct in6pcb*". The code didn't compile on NetBSD beforehand, if both FAST_IPSEC + INET6 were configured. This fix will cause even more short-term breakage for that case, but its a step in the right direction: it shows up what still needs to be fixed.
2003-11-20 09:35:09 +03:00
struct in6pcb;
Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. Fast-IPsec is a rework of the OpenBSD and KAME IPsec code, using the OpenCryptoFramework (and thus hardware crypto accelerators) and numerous detailed performance improvements. This import is (aside from SPL-level names) the FreeBSD source, imported ``as-is'' as a historical snapshot, for future maintenance and comparison against the FreeBSD source. For now, several minor kernel-API differences are hidden by macros a shim file, ipsec_osdep.h, which (aside from SPL names) can be targeted at either NetBSD or FreeBSD.
2003-08-14 00:06:49 +04:00
/* KAME compatibility shims */
#define ipsec6_getpolicybyaddr ipsec_getpolicybyaddr
#define ipsec6_getpolicybysock ipsec_getpolicybysock
#define ipsec6stat newipsecstat
#define out_inval ips_out_inval
#define in_polvio ips_in_polvio
#define out_polvio ips_out_polvio
#define key_freesp(_x) KEY_FREESP(&_x)
This file was derived from FreeBSD, where "in6pcb" is a macro for "inpcb", and this struct inpcb* and struct inp6cb* are the same type. On NetBSD they are different types, so we must change the types of formal argument in IPv6-specific functions from "struct inpcb *" to "struct in6pcb*". The code didn't compile on NetBSD beforehand, if both FAST_IPSEC + INET6 were configured. This fix will cause even more short-term breakage for that case, but its a step in the right direction: it shows up what still needs to be fixed.
2003-11-20 09:35:09 +03:00
extern int ipsec6_delete_pcbpolicy __P((struct in6pcb *));
extern int ipsec6_set_policy __P((struct in6pcb *inp, int optname,
Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. Fast-IPsec is a rework of the OpenBSD and KAME IPsec code, using the OpenCryptoFramework (and thus hardware crypto accelerators) and numerous detailed performance improvements. This import is (aside from SPL-level names) the FreeBSD source, imported ``as-is'' as a historical snapshot, for future maintenance and comparison against the FreeBSD source. For now, several minor kernel-API differences are hidden by macros a shim file, ipsec_osdep.h, which (aside from SPL names) can be targeted at either NetBSD or FreeBSD.
2003-08-14 00:06:49 +04:00
caddr_t request, size_t len, int priv));
extern int ipsec6_get_policy
This file was derived from FreeBSD, where "in6pcb" is a macro for "inpcb", and this struct inpcb* and struct inp6cb* are the same type. On NetBSD they are different types, so we must change the types of formal argument in IPv6-specific functions from "struct inpcb *" to "struct in6pcb*". The code didn't compile on NetBSD beforehand, if both FAST_IPSEC + INET6 were configured. This fix will cause even more short-term breakage for that case, but its a step in the right direction: it shows up what still needs to be fixed.
2003-11-20 09:35:09 +03:00
__P((struct in6pcb *inp, caddr_t request, size_t len, struct mbuf **mp));
extern int ipsec6_in_reject __P((struct mbuf *, struct in6pcb *));
/*
* KAME ipsec6_in_reject_so(struct mbuf*, struct so) compatibility shim
*/
#define ipsec6_in_reject_so(m, _so) \
ipsec6_in_reject(m, ((_so) == NULL? NULL : sotoin6pcb(_so)))
Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. Fast-IPsec is a rework of the OpenBSD and KAME IPsec code, using the OpenCryptoFramework (and thus hardware crypto accelerators) and numerous detailed performance improvements. This import is (aside from SPL-level names) the FreeBSD source, imported ``as-is'' as a historical snapshot, for future maintenance and comparison against the FreeBSD source. For now, several minor kernel-API differences are hidden by macros a shim file, ipsec_osdep.h, which (aside from SPL names) can be targeted at either NetBSD or FreeBSD.
2003-08-14 00:06:49 +04:00
struct tcp6cb;
This file was derived from FreeBSD, where "in6pcb" is a macro for "inpcb", and this struct inpcb* and struct inp6cb* are the same type. On NetBSD they are different types, so we must change the types of formal argument in IPv6-specific functions from "struct inpcb *" to "struct in6pcb*". The code didn't compile on NetBSD beforehand, if both FAST_IPSEC + INET6 were configured. This fix will cause even more short-term breakage for that case, but its a step in the right direction: it shows up what still needs to be fixed.
2003-11-20 09:35:09 +03:00
extern size_t ipsec6_hdrsiz __P((struct mbuf *, u_int, struct in6pcb *));
extern size_t ipsec6_hdrsiz_tcp __P((struct tcpcb*));
Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. Fast-IPsec is a rework of the OpenBSD and KAME IPsec code, using the OpenCryptoFramework (and thus hardware crypto accelerators) and numerous detailed performance improvements. This import is (aside from SPL-level names) the FreeBSD source, imported ``as-is'' as a historical snapshot, for future maintenance and comparison against the FreeBSD source. For now, several minor kernel-API differences are hidden by macros a shim file, ipsec_osdep.h, which (aside from SPL names) can be targeted at either NetBSD or FreeBSD.
2003-08-14 00:06:49 +04:00
struct ip6_hdr;
extern const char *ipsec6_logpacketstr __P((struct ip6_hdr *, u_int32_t));
This file was derived from FreeBSD, where "in6pcb" is a macro for "inpcb", and this struct inpcb* and struct inp6cb* are the same type. On NetBSD they are different types, so we must change the types of formal argument in IPv6-specific functions from "struct inpcb *" to "struct in6pcb*". The code didn't compile on NetBSD beforehand, if both FAST_IPSEC + INET6 were configured. This fix will cause even more short-term breakage for that case, but its a step in the right direction: it shows up what still needs to be fixed.
2003-11-20 09:35:09 +03:00
#ifdef __NetBSD__
/* NetBSD protosw ctlin entrypoint */
extern void esp6_ctlinput __P((int, struct sockaddr *, void *));
extern void ah6_ctlinput __P((int, struct sockaddr *, void *));
#endif /* __NetBSD__ */
Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. Fast-IPsec is a rework of the OpenBSD and KAME IPsec code, using the OpenCryptoFramework (and thus hardware crypto accelerators) and numerous detailed performance improvements. This import is (aside from SPL-level names) the FreeBSD source, imported ``as-is'' as a historical snapshot, for future maintenance and comparison against the FreeBSD source. For now, several minor kernel-API differences are hidden by macros a shim file, ipsec_osdep.h, which (aside from SPL names) can be targeted at either NetBSD or FreeBSD.
2003-08-14 00:06:49 +04:00
struct m_tag;
extern int ipsec6_common_input(struct mbuf **mp, int *offp, int proto);
extern int ipsec6_common_input_cb(struct mbuf *m, struct secasvar *sav,
int skip, int protoff, struct m_tag *mt);
extern void esp6_ctlinput(int, struct sockaddr *, void *);
struct ipsec_output_state;
extern int ipsec6_output_trans __P((struct ipsec_output_state *, u_char *,
struct mbuf *, struct secpolicy *, int, int *));
extern int ipsec6_output_tunnel __P((struct ipsec_output_state *,
struct secpolicy *, int));
#endif /*_KERNEL*/
#endif /*_NETIPSEC_IPSEC6_H_*/