Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
NetBSD/sys/netipsec
History
jonathan 995c532c33 Revert the (default) ip_id algorithm to the pre-randomid algorithm, 
due to demonstrated low-period repeated IDs from the randomized IP_id
code.  Consensus is that the low-period repetition (much less than
2^15) is not suitable for general-purpose use.

Allocators of new IPv4 IDs should now call the function ip_newid().
Randomized IP_ids is now a config-time option, "options RANDOM_IP_ID".
ip_newid() can use ip_random-id()_IP_ID if and only if configured
with RANDOM_IP_ID. A sysctl knob should be  provided.

This API may be reworked in the near future to support linear ip_id
counters per (src,dst) IP-address pair.
 		2003-11-17 21:34:27 +00:00
..
ah.h Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. 2003-08-13 20:06:49 +00:00
ah_var.h Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. 2003-08-13 20:06:49 +00:00
esp.h Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. 2003-08-13 20:06:49 +00:00
esp_var.h Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. 2003-08-13 20:06:49 +00:00
files.netipsec separate netkey/key* and netipsec/key* 2003-09-20 05:14:41 +00:00
ipcomp.h Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. 2003-08-13 20:06:49 +00:00
ipcomp_var.h Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. 2003-08-13 20:06:49 +00:00
ipip_var.h Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. 2003-08-13 20:06:49 +00:00
ipsec.c Reversion of "netkey merge", part 2 (replacement of removed files in the 2003-10-06 22:05:15 +00:00
ipsec.h Reversion of "netkey merge", part 2 (replacement of removed files in the 2003-10-06 22:05:15 +00:00
ipsec6.h Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. 2003-08-13 20:06:49 +00:00
ipsec_input.c Reversion of "netkey merge", part 2 (replacement of removed files in the 2003-10-06 22:05:15 +00:00
ipsec_mbuf.c opt_inet6.h is FreeBSD-specific, so wrap it with #ifdef __FreeBSD__/#endif. 2003-08-20 22:33:40 +00:00
ipsec_netbsd.c Reversion of "netkey merge", part 2 (replacement of removed files in the 2003-10-06 22:05:15 +00:00
ipsec_osdep.h Change global head-of-local-IP-address list from in_ifaddr to 2003-11-11 20:25:26 +00:00
ipsec_output.c Reversion of "netkey merge", part 2 (replacement of removed files in the 2003-10-06 22:05:15 +00:00
key.c Reversion of "netkey merge", part 2 (replacement of removed files in the 2003-10-06 22:05:15 +00:00
key.h Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. 2003-08-13 20:06:49 +00:00
key_debug.c Reversion of "netkey merge", part 2 (replacement of removed files in the 2003-10-06 22:05:15 +00:00
key_debug.h Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. 2003-08-13 20:06:49 +00:00
key_var.h Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. 2003-08-13 20:06:49 +00:00
keydb.h Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. 2003-08-13 20:06:49 +00:00
keysock.c Reversion of "netkey merge", part 2 (replacement of removed files in the 2003-10-06 22:05:15 +00:00
keysock.h Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. 2003-08-13 20:06:49 +00:00
xform.h Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. 2003-08-13 20:06:49 +00:00
xform_ah.c Reversion of "netkey merge", part 2 (replacement of removed files in the 2003-10-06 22:05:15 +00:00
xform_esp.c Reversion of "netkey merge", part 2 (replacement of removed files in the 2003-10-06 22:05:15 +00:00
xform_ipcomp.c Reversion of "netkey merge", part 2 (replacement of removed files in the 2003-10-06 22:05:15 +00:00
xform_ipip.c Revert the (default) ip_id algorithm to the pre-randomid algorithm, 2003-11-17 21:34:27 +00:00