Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
NetBSD/sys/netipsec
History
jonathan 85b3ba5bf1 Redo net.inet.* sysctl subtree for fast-ipsec from scratch. 
Attach FAST-IPSEC statistics with 64-bit counters to new sysctl MIB.
Rework netstat to show FAST_IPSEC statistics, via sysctl,  for
netstat -p ipsec.

New kernel files:
	sys/netipsec/Makefile		(new file; install *_var.h includes)
	sys/netipsec/ipsec_var.h	(new 64-bit mib counter struct)

Changed kernel files:
	sys/Makefile			(recurse into sys/netipsec/)
	sys/netinet/in.h		(fake IP_PROTO name for fast_ipsec
					sysctl subtree.)
	sys/netipsec/ipsec.h		(minimal userspace inclusion)
	sys/netipsec/ipsec_osdep.h	(minimal userspace inclusion)
	sys/netipsec/ipsec_netbsd.c	(redo sysctl subtree from scratch)
	sys/netipsec/key*.c		(fix broken net.key subtree)

	sys/netipsec/ah_var.h		(increase all counters to 64 bits)
	sys/netipsec/esp_var.h		(increase all counters to 64 bits)
	sys/netipsec/ipip_var.h		(increase all counters to 64 bits)
	sys/netipsec/ipcomp_var.h	(increase all counters to 64 bits)

	sys/netipsec/ipsec.c		(add #include netipsec/ipsec_var.h)
	sys/netipsec/ipsec_mbuf.c	(add #include netipsec/ipsec_var.h)
	sys/netipsec/ipsec_output.c	(add #include netipsec/ipsec_var.h)

	sys/netinet/raw_ip.c		(add #include netipsec/ipsec_var.h)
	sys/netinet/tcp_input.c		(add #include netipsec/ipsec_var.h)
	sys/netinet/udp_usrreq.c	(add #include netipsec/ipsec_var.h)

Changes to usr.bin/netstat to print the new fast-ipsec sysctl tree
for "netstat -s -p ipsec":

New file:
	usr.bin/netstat/fast_ipsec.c	(print fast-ipsec counters)

Changed files:
	usr.bin/netstat/Makefile	(add fast_ipsec.c)
	usr.bin/netstat/netstat.h	(declarations for fast_ipsec.c)
	usr.bin/netstat/main.c		(call KAME-vs-fast-ipsec dispatcher)
 		2004-05-07 00:55:14 +00:00
..
Makefile Redo net.inet.* sysctl subtree for fast-ipsec from scratch. 2004-05-07 00:55:14 +00:00
ah.h
…
ah_var.h Redo net.inet.* sysctl subtree for fast-ipsec from scratch. 2004-05-07 00:55:14 +00:00
esp.h
…
esp_var.h Redo net.inet.* sysctl subtree for fast-ipsec from scratch. 2004-05-07 00:55:14 +00:00
files.netipsec xform_tcp.c is needed only with FAST_IPSEC 2004-04-26 03:50:57 +00:00
ipcomp.h
…
ipcomp_var.h Redo net.inet.* sysctl subtree for fast-ipsec from scratch. 2004-05-07 00:55:14 +00:00
ipip_var.h Redo net.inet.* sysctl subtree for fast-ipsec from scratch. 2004-05-07 00:55:14 +00:00
ipsec.c Redo net.inet.* sysctl subtree for fast-ipsec from scratch. 2004-05-07 00:55:14 +00:00
ipsec.h Redo net.inet.* sysctl subtree for fast-ipsec from scratch. 2004-05-07 00:55:14 +00:00
ipsec6.h Dynamic sysctl. 2003-12-04 19:38:21 +00:00
ipsec_input.c Add `const' to the safety-catch local definition of ip6_protosw, 2004-04-24 23:28:13 +00:00
ipsec_mbuf.c Redo net.inet.* sysctl subtree for fast-ipsec from scratch. 2004-05-07 00:55:14 +00:00
ipsec_netbsd.c Redo net.inet.* sysctl subtree for fast-ipsec from scratch. 2004-05-07 00:55:14 +00:00
ipsec_osdep.h Minimal cleanup of sys/netipsec/ipsec{,_osdep}.h, to allow compiling 2004-04-30 04:12:29 +00:00
ipsec_output.c Redo net.inet.* sysctl subtree for fast-ipsec from scratch. 2004-05-07 00:55:14 +00:00
ipsec_var.h Redo net.inet.* sysctl subtree for fast-ipsec from scratch. 2004-05-07 00:55:14 +00:00
key.c Fix for setkey(8) to dump SPD and SAdb via sysctl: 2004-04-30 01:08:35 +00:00
key.h Bring the PCB policy cache over from KAME IPsec, including the "hint" 2004-03-02 02:22:56 +00:00
key_debug.c
…
key_debug.h
…
key_var.h Add KEYCTL_DUMPSA/KEYCTL_DUMPSP support. 2003-12-12 21:04:03 +00:00
keydb.h
…
keysock.c Remove #else of #if __STDC__ 2004-04-26 01:41:15 +00:00
keysock.h Dynamic sysctl. 2003-12-04 19:38:21 +00:00
xform.h
…
xform_ah.c Commit an old diff for AH which has been in my personal tree since 2004-05-01 03:00:42 +00:00
xform_esp.c sys/netinet6/ip6_ecn.h is reportedly a FreeBSD-ism; NetBSD has 2004-03-17 00:21:43 +00:00
xform_ipcomp.c
…
xform_ipip.c sys/netinet6/ip6_ecn.h is reportedly a FreeBSD-ism; NetBSD has 2004-03-17 00:21:43 +00:00
xform_tcp.c Initial commit of a port of the FreeBSD implementation of RFC 2385 2004-04-25 22:25:03 +00:00