13f8d2ce5f
Gone are the old kern_sysctl(), cpu_sysctl(), hw_sysctl(), vfs_sysctl(), etc, routines, along with sysctl_int() et al. Now all nodes are registered with the tree, and nodes can be added (or removed) easily, and I/O to and from the tree is handled generically. Since the nodes are registered with the tree, the mapping from name to number (and back again) can now be discovered, instead of having to be hard coded. Adding new nodes to the tree is likewise much simpler -- the new infrastructure handles almost all the work for simple types, and just about anything else can be done with a small helper function. All existing nodes are where they were before (numerically speaking), so all existing consumers of sysctl information should notice no difference. PS - I'm sorry, but there's a distinct lack of documentation at the moment. I'm working on sysctl(3/8/9) right now, and I promise to watch out for buses.
108 lines
4.0 KiB
C
108 lines
4.0 KiB
C
/* $NetBSD: ipsec6.h,v 1.3 2003/12/04 19:38:24 atatat Exp $ */
|
|
/* $FreeBSD: src/sys/netipsec/ipsec6.h,v 1.1.4.1 2003/01/24 05:11:35 sam Exp $ */
|
|
/* $KAME: ipsec.h,v 1.44 2001/03/23 08:08:47 itojun Exp $ */
|
|
|
|
/*
|
|
* Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
|
|
* All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
* 3. Neither the name of the project nor the names of its contributors
|
|
* may be used to endorse or promote products derived from this software
|
|
* without specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
*/
|
|
|
|
/*
|
|
* IPsec controller part.
|
|
*/
|
|
|
|
#ifndef _NETIPSEC_IPSEC6_H_
|
|
#define _NETIPSEC_IPSEC6_H_
|
|
|
|
#include <net/pfkeyv2.h>
|
|
#include <netipsec/keydb.h>
|
|
#ifdef __NetBSD__
|
|
#include <netinet6/in6_pcb.h>
|
|
#endif
|
|
|
|
#ifdef _KERNEL
|
|
extern int ip6_esp_trans_deflev;
|
|
extern int ip6_esp_net_deflev;
|
|
extern int ip6_ah_trans_deflev;
|
|
extern int ip6_ah_net_deflev;
|
|
extern int ip6_ipsec_ecn;
|
|
extern int ip6_esp_randpad;
|
|
extern struct secpolicy ip6_def_policy;
|
|
|
|
struct inpcb;
|
|
struct in6pcb;
|
|
|
|
/* KAME compatibility shims */
|
|
#define ipsec6_getpolicybyaddr ipsec_getpolicybyaddr
|
|
#define ipsec6_getpolicybysock ipsec_getpolicybysock
|
|
#define ipsec6stat newipsecstat
|
|
#define out_inval ips_out_inval
|
|
#define in_polvio ips_in_polvio
|
|
#define out_polvio ips_out_polvio
|
|
#define key_freesp(_x) KEY_FREESP(&_x)
|
|
|
|
extern int ipsec6_delete_pcbpolicy __P((struct in6pcb *));
|
|
extern int ipsec6_set_policy __P((struct in6pcb *inp, int optname,
|
|
caddr_t request, size_t len, int priv));
|
|
extern int ipsec6_get_policy
|
|
__P((struct in6pcb *inp, caddr_t request, size_t len, struct mbuf **mp));
|
|
extern int ipsec6_in_reject __P((struct mbuf *, struct in6pcb *));
|
|
/*
|
|
* KAME ipsec6_in_reject_so(struct mbuf*, struct so) compatibility shim
|
|
*/
|
|
#define ipsec6_in_reject_so(m, _so) \
|
|
ipsec6_in_reject(m, ((_so) == NULL? NULL : sotoin6pcb(_so)))
|
|
|
|
struct tcp6cb;
|
|
|
|
extern size_t ipsec6_hdrsiz __P((struct mbuf *, u_int, struct in6pcb *));
|
|
extern size_t ipsec6_hdrsiz_tcp __P((struct tcpcb*));
|
|
|
|
struct ip6_hdr;
|
|
extern const char *ipsec6_logpacketstr __P((struct ip6_hdr *, u_int32_t));
|
|
|
|
#ifdef __NetBSD__
|
|
/* NetBSD protosw ctlin entrypoint */
|
|
extern void esp6_ctlinput __P((int, struct sockaddr *, void *));
|
|
extern void ah6_ctlinput __P((int, struct sockaddr *, void *));
|
|
#endif /* __NetBSD__ */
|
|
|
|
struct m_tag;
|
|
extern int ipsec6_common_input(struct mbuf **mp, int *offp, int proto);
|
|
extern int ipsec6_common_input_cb(struct mbuf *m, struct secasvar *sav,
|
|
int skip, int protoff, struct m_tag *mt);
|
|
extern void esp6_ctlinput(int, struct sockaddr *, void *);
|
|
|
|
struct ipsec_output_state;
|
|
extern int ipsec6_output_trans __P((struct ipsec_output_state *, u_char *,
|
|
struct mbuf *, struct secpolicy *, int, int *));
|
|
extern int ipsec6_output_tunnel __P((struct ipsec_output_state *,
|
|
struct secpolicy *, int));
|
|
#endif /*_KERNEL*/
|
|
|
|
#endif /*_NETIPSEC_IPSEC6_H_*/
|