364 	netstack_t	*ns = ipss->ipsec_netstack;  in ipsec_stack_fini()  local
381 		ITP_REFRELE(node, ns);  in ipsec_stack_fini()
387 	ipsec_config_flush(ns);  in ipsec_stack_fini()
421 				ipsec_alg_unreg(algtype, i, ns);  in ipsec_stack_fini()
427 	ipsid_gc(ns);  in ipsec_stack_fini()
428 	ipsid_fini(ns);  in ipsec_stack_fini()
477     boolean_t global_cleanup, netstack_t *ns)  in ipsec_alloc_table()  argument
489 			    ipsec_free_tables(ns->netstack_ipsec) :  in ipsec_alloc_table()
500 ipsec_alloc_tables(int kmflag, netstack_t *ns)  in ipsec_alloc_tables()  argument
503 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_alloc_tables()
506 	    ipss->ipsec_spd_hashsize, kmflag, B_TRUE, ns);  in ipsec_alloc_tables()
511 	    ipss->ipsec_spd_hashsize, kmflag, B_TRUE, ns);  in ipsec_alloc_tables()
588 ipsec_stack_init(netstackid_t stackid, netstack_t *ns)  in ipsec_stack_init()  argument
594 	ipss->ipsec_netstack = ns;  in ipsec_stack_init()
605 	ns->netstack_ipsec = ipss;  in ipsec_stack_init()
615 	if (ipsec_alloc_tables(KM_NOSLEEP, ns) != 0) {  in ipsec_stack_init()
622 		(void) ipsec_alloc_tables(KM_SLEEP, ns);  in ipsec_stack_init()
629 	ipsid_init(ns);  in ipsec_stack_init()
710 alg_insert_sortlist(enum ipsec_algtype at, uint8_t algid, netstack_t *ns)  in alg_insert_sortlist()  argument
712 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in alg_insert_sortlist()
750 alg_remove_sortlist(enum ipsec_algtype at, uint8_t algid, netstack_t *ns)  in alg_remove_sortlist()  argument
754 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in alg_remove_sortlist()
774 ipsec_alg_reg(ipsec_algtype_t algtype, ipsec_alginfo_t *alg, netstack_t *ns)  in ipsec_alg_reg()  argument
776 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_alg_reg()
781 	ipsec_alg_fix_min_max(alg, algtype, ns);  in ipsec_alg_reg()
785 	alg_insert_sortlist(algtype, alg->alg_id, ns);  in ipsec_alg_reg()
793 ipsec_alg_unreg(ipsec_algtype_t algtype, uint8_t algid, netstack_t *ns)  in ipsec_alg_unreg()  argument
795 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_alg_unreg()
804 	alg_remove_sortlist(algtype, algid, ns);  in ipsec_alg_unreg()
812 ipsec_system_policy(netstack_t *ns)  in ipsec_system_policy()  argument
814 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_system_policy()
822 ipsec_inactive_policy(netstack_t *ns)  in ipsec_inactive_policy()  argument
824 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_inactive_policy()
837     netstack_t *ns)  in ipsec_swap_policy()  argument
878 	ipsec_update_present_flags(ns->netstack_ipsec);  in ipsec_swap_policy()
887 ipsec_swap_global_policy(netstack_t *ns)  in ipsec_swap_global_policy()  argument
889 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_swap_global_policy()
892 	    &ipss->ipsec_inactive_policy, ns);  in ipsec_swap_global_policy()
961     netstack_t *ns)  in ipsec_copy_polhead()  argument
967 	ipsec_polhead_flush(dph, ns);  in ipsec_copy_polhead()
999 	ipsec_polhead_flush(dph, ns);  in ipsec_copy_polhead()
1009 ipsec_clone_system_policy(netstack_t *ns)  in ipsec_clone_system_policy()  argument
1011 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_clone_system_policy()
1014 	    &ipss->ipsec_inactive_policy, ns));  in ipsec_clone_system_policy()
1024     boolean_t secure, netstack_t *ns)  in ipsec_log_policy_failure()  argument
1030 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_log_policy_failure()
1047 	ipsec_rl_strlog(ns, IP_MOD_ID, 0, 0, SL_ERROR|SL_WARN|SL_CONSOLE,  in ipsec_log_policy_failure()
1058 ipsec_rl_strlog(netstack_t *ns, short mid, short sid, char level, ushort_t sl,  in ipsec_rl_strlog()  argument
1063 	ip_stack_t	*ipst = ns->netstack_ip;  in ipsec_rl_strlog()
1064 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_rl_strlog()
1086 ipsec_config_flush(netstack_t *ns)  in ipsec_config_flush()  argument
1088 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_config_flush()
1091 	ipsec_polhead_flush(&ipss->ipsec_system_policy, ns);  in ipsec_config_flush()
1103     uint16_t *minbits, uint16_t *maxbits, netstack_t *ns)  in act_alg_adjust()  argument
1105 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in act_alg_adjust()
1138 ipsec_check_action(ipsec_act_t *act, int *diag, netstack_t *ns)  in ipsec_check_action()  argument
1141 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_check_action()
1163 	    &ipp->ipp_ah_minbits, &ipp->ipp_ah_maxbits, ns);  in ipsec_check_action()
1165 	    &ipp->ipp_espa_minbits, &ipp->ipp_espa_maxbits, ns);  in ipsec_check_action()
1167 	    &ipp->ipp_espe_minbits, &ipp->ipp_espe_maxbits, ns);  in ipsec_check_action()
1190     uint_t auth_alg, uint_t encr_alg, uint_t eauth_alg, netstack_t *ns)  in ipsec_setup_act()  argument
1201 	    &ipp->ipp_ah_minbits, &ipp->ipp_ah_maxbits, ns);  in ipsec_setup_act()
1203 	    &ipp->ipp_espa_minbits, &ipp->ipp_espa_maxbits, ns);  in ipsec_setup_act()
1205 	    &ipp->ipp_espe_minbits, &ipp->ipp_espe_maxbits, ns);  in ipsec_setup_act()
1214 ipsec_act_wildcard_expand(ipsec_act_t *act, uint_t *nact, netstack_t *ns)  in ipsec_act_wildcard_expand()  argument
1223 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_act_wildcard_expand()
1323 				    auth_alg, encr_alg, eauth_alg, ns);  in ipsec_act_wildcard_expand()
1371     netstack_t *ns)  in ipsec_actvec_from_req()  argument
1383 	*actp = ipsec_act_wildcard_expand(&act, nactp, ns);  in ipsec_actvec_from_req()
1523     kstat_named_t **counter, uint64_t pkt_unique, netstack_t *ns)  in ipsec_check_ipsecin_unique()  argument
1528 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_check_ipsecin_unique()
1567     netstack_t *ns)  in ipsec_check_ipsecin_action()  argument
1574 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_check_ipsecin_action()
1801     kstat_named_t **counter, conn_t *connp, netstack_t *ns)  in ipsec_check_ipsecin_latch()  argument
1803 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_check_ipsecin_latch()
1838 		    conn_to_unique(connp, mp, ipha, ip6h), ns)) {  in ipsec_check_ipsecin_latch()
1843 	    counter, ns));  in ipsec_check_ipsecin_latch()
1858     netstack_t *ns)  in ipsec_check_ipsecin_policy()  argument
1862 	ip_stack_t	*ipst = ns->netstack_ip;  in ipsec_check_ipsecin_policy()
1863 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_check_ipsecin_policy()
1894 	    ns))  in ipsec_check_ipsecin_policy()
1904 		    ipha, ip6h, &reason, &counter, ns)) {  in ipsec_check_ipsecin_policy()
1911 	ipsec_rl_strlog(ns, IP_MOD_ID, 0, 0, SL_ERROR|SL_WARN|SL_CONSOLE,  in ipsec_check_ipsecin_policy()
2086     netstack_t *ns)  in ipsec_find_policy()  argument
2089 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_find_policy()
2116     ipha_t *ipha, ip6_t *ip6h, ip_recv_attr_t *ira, netstack_t *ns)  in ipsec_check_global_policy()  argument
2123 	ip_stack_t	*ipst = ns->netstack_ip;  in ipsec_check_global_policy()
2124 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_check_global_policy()
2166 			    "ipsec_init_inbound_sel", ipha, ip6h, B_TRUE, ns);  in ipsec_check_global_policy()
2182 		p = ipsec_find_policy(IPSEC_TYPE_INBOUND, connp, &sel, ns);  in ipsec_check_global_policy()
2199 			    ns);  in ipsec_check_global_policy()
2205 		    pkt_unique, ira, ns));  in ipsec_check_global_policy()
2219 	    "ipsec_check_global_policy", ipha, ip6h, B_FALSE, ns);  in ipsec_check_global_policy()
2463 	netstack_t	*ns;  in ipsec_check_inbound_policy()  local
2468 	ns = connp->conn_netstack;  in ipsec_check_inbound_policy()
2469 	ipss = ns->netstack_ipsec;  in ipsec_check_inbound_policy()
2470 	ipst = ns->netstack_ip;  in ipsec_check_inbound_policy()
2511 					    ip6h, B_FALSE, ns);  in ipsec_check_inbound_policy()
2539 			    ipha, ip6h, ira, ns);  in ipsec_check_inbound_policy()
2541 				IPPH_REFRELE(policy_head, ns);  in ipsec_check_inbound_policy()
2577 		    ipha, ip6h, ira, ns);  in ipsec_check_inbound_policy()
2579 			IPPH_REFRELE(policy_head, ns);  in ipsec_check_inbound_policy()
2596 		    ipha, ip6h, &reason, &counter, connp, ns)) {  in ipsec_check_inbound_policy()
2602 		ipsec_rl_strlog(ns, IP_MOD_ID, 0, 0,  in ipsec_check_inbound_policy()
2621 	mp = ipsec_check_ipsecin_policy(mp, p, ipha, ip6h, unique_id, ira, ns);  in ipsec_check_inbound_policy()
3125 selkey_hash(const ipsec_selkey_t *selkey, netstack_t *ns)  in selkey_hash()  argument
3128 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in selkey_hash()
3162 ipsec_act_find(const ipsec_act_t *a, int n, netstack_t *ns)  in ipsec_act_find()  argument
3174 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_act_find()
3304 	netstack_t *ns;  in ipsec_action_reclaim()  local
3308 	while ((ns = netstack_next(&nh)) != NULL) {  in ipsec_action_reclaim()
3313 		if ((ipss = ns->netstack_ipsec) == NULL) {  in ipsec_action_reclaim()
3314 			netstack_rele(ns);  in ipsec_action_reclaim()
3318 		netstack_rele(ns);  in ipsec_action_reclaim()
3366 ipsec_find_sel(ipsec_selkey_t *selkey, netstack_t *ns)  in ipsec_find_sel()  argument
3370 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_find_sel()
3378 	hval = selkey_hash(selkey, ns);  in ipsec_find_sel()
3420 ipsec_sel_rel(ipsec_sel_t **spp, netstack_t *ns)  in ipsec_sel_rel()  argument
3424 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_sel_rel()
3468     int nacts, int prio, uint64_t *index_ptr, netstack_t *ns)  in ipsec_policy_create()  argument
3473 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_policy_create()
3479 	ap = ipsec_act_find(a, nacts, ns);  in ipsec_policy_create()
3480 	sp = ipsec_find_sel(keys, ns);  in ipsec_policy_create()
3487 			ipsec_sel_rel(&sp, ns);  in ipsec_policy_create()
3495 	ipp->ipsp_netstack = ns;	/* Needed for ipsec_policy_free */  in ipsec_policy_create()
3537 	netstack_t *ns)  in ipsec_policy_delete()  argument
3544 	sp = ipsec_find_sel(keys, ns);  in ipsec_policy_delete()
3568 		ipsec_update_present_flags(ns->netstack_ipsec);  in ipsec_policy_delete()
3572 		ipsec_sel_rel(&sp, ns);  in ipsec_policy_delete()
3578 	ipsec_sel_rel(&sp, ns);  in ipsec_policy_delete()
3584     netstack_t *ns)  in ipsec_policy_delete_index()  argument
3622 		ipsec_update_present_flags(ns->netstack_ipsec);  in ipsec_policy_delete_index()
3815     netstack_t *ns)  in ipsec_enter_policy()  argument
3845 	ipsec_update_present_flags(ns->netstack_ipsec);  in ipsec_enter_policy()
3880     int fam, int ptype, netstack_t *ns)  in ipsec_polhead_insert()  argument
3889 	    NULL, ns)) != NULL) {  in ipsec_polhead_insert()
3898 ipsec_polhead_flush(ipsec_policy_head_t *php, netstack_t *ns)  in ipsec_polhead_flush()  argument
3908 	ipsec_update_present_flags(ns->netstack_ipsec);  in ipsec_polhead_flush()
3912 ipsec_polhead_free(ipsec_policy_head_t *php, netstack_t *ns)  in ipsec_polhead_free()  argument
3919 	ipsec_polhead_flush(php, ns);  in ipsec_polhead_free()
3975 ipsec_polhead_split(ipsec_policy_head_t *php, netstack_t *ns)  in ipsec_polhead_split()  argument
3988 	if (ipsec_copy_polhead(php, nphp, ns) != 0) {  in ipsec_polhead_split()
3989 		ipsec_polhead_free(nphp, ns);  in ipsec_polhead_split()
3992 	IPPH_REFRELE(php, ns);  in ipsec_polhead_split()
4027 	netstack_t	*ns = ixa->ixa_ipst->ips_netstack;  in ipsec_in_to_out()  local
4051 	    ns->netstack_ipsec)) {  in ipsec_in_to_out()
4203 	netstack_t	*ns = ipst->ips_netstack;  in ip_output_attach_policy()  local
4204 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ip_output_attach_policy()
4243 	p = ipsec_find_policy(IPSEC_TYPE_OUTBOUND, connp, &sel, ns);  in ip_output_attach_policy()
4278 	netstack_t	*ns = connp->conn_netstack;  in ipsec_conn_cache_policy()  local
4279 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_conn_cache_policy()
4346 		p = ipsec_find_policy(IPSEC_TYPE_INBOUND, connp, &sel, ns);  in ipsec_conn_cache_policy()
4352 		p = ipsec_find_policy(IPSEC_TYPE_OUTBOUND, connp, &sel, ns);  in ipsec_conn_cache_policy()
4411 	netstack_t	*ns = connp->conn_netstack;  in ipsec_cache_outbound_policy()  local
4412 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_cache_outbound_policy()
4460 		p = ipsec_find_policy(IPSEC_TYPE_OUTBOUND, connp, &sel, ns);  in ipsec_cache_outbound_policy()
4556 ipsid_lookup(int idtype, char *idstring, netstack_t *ns)  in ipsid_lookup()  argument
4561 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsid_lookup()
4611 ipsid_gc(netstack_t *ns)  in ipsid_gc()  argument
4616 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsid_gc()
4660 ipsid_init(netstack_t *ns)  in ipsid_init()  argument
4664 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsid_init()
4676 ipsid_fini(netstack_t *ns)  in ipsid_fini()  argument
4680 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsid_fini()
4695     netstack_t *ns)  in ipsec_alg_fix_min_max()  argument
4704 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_alg_fix_min_max()
5020 	netstack_t *ns;  in ipsec_prov_update_callback()  local
5023 	while ((ns = netstack_next(&nh)) != NULL) {  in ipsec_prov_update_callback()
5024 		ipsec_prov_update_callback_stack(event, event_arg, ns);  in ipsec_prov_update_callback()
5025 		netstack_rele(ns);  in ipsec_prov_update_callback()
5032     netstack_t *ns)  in ipsec_prov_update_callback_stack()  argument
5041 	ipsec_stack_t	*ipss = ns->netstack_ipsec;  in ipsec_prov_update_callback_stack()
5102 			ipsec_alg_fix_min_max(alg, algtype, ns);  in ipsec_prov_update_callback_stack()
5119 				    CRYPTO_MECH_ADDED, ns);  in ipsec_prov_update_callback_stack()
5132 		ipsecah_algs_changed(ns);  in ipsec_prov_update_callback_stack()
5133 		ipsecesp_algs_changed(ns);  in ipsec_prov_update_callback_stack()
5192 	netstack_t *ns = iptun->iptun_ns;  in ipsec_tun_outbound()  local
5193 	ipsec_stack_t *ipss = ns->netstack_ipsec;  in ipsec_tun_outbound()
5465     ipha_t *inner_ipv4, ip6_t *inner_ipv6, uint64_t pkt_unique, netstack_t *ns)  in ipsec_check_ipsecin_policy_reasm()  argument
5494 		    inner_ipv6, pkt_unique, &iras, ns);  in ipsec_check_ipsecin_policy_reasm()
5546     ip6_t *outer_ipv6, int outer_hdr_len, netstack_t *ns)  in ipsec_tun_inbound()  argument
5557 	ipsec_stack_t *ipss = ns->netstack_ipsec;  in ipsec_tun_inbound()
5816 				    ira, ns);  in ipsec_tun_inbound()
5824 				    ns);  in ipsec_tun_inbound()
5891 	    outer_ipv6, ira, ns);  in ipsec_tun_inbound()
5936 itp_free(ipsec_tun_pol_t *node, netstack_t *ns)  in itp_free()  argument
5939 		IPPH_REFRELE(node->itp_policy, ns);  in itp_free()
5943 		IPPH_REFRELE(node->itp_inactive, ns);  in itp_free()
5951 itp_unlink(ipsec_tun_pol_t *node, netstack_t *ns)  in itp_unlink()  argument
5953 	ipsec_stack_t *ipss = ns->netstack_ipsec;  in itp_unlink()
5960 	ITP_REFRELE(node, ns);  in itp_unlink()
5968 get_tunnel_policy(char *name, netstack_t *ns)  in get_tunnel_policy()  argument
5971 	ipsec_stack_t *ipss = ns->netstack_ipsec;  in get_tunnel_policy()
5992     void *arg, netstack_t *ns)  in itp_walk()  argument
5995 	ipsec_stack_t *ipss = ns->netstack_ipsec;  in itp_walk()
6000 		iterator(node, arg, ns);  in itp_walk()
6009 tunnel_polhead_init(ipsec_policy_head_t *iph, netstack_t *ns)  in tunnel_polhead_init()  argument
6011 	ipsec_stack_t *ipss = ns->netstack_ipsec;  in tunnel_polhead_init()
6017 	    KM_SLEEP, B_FALSE, ns) != 0) {  in tunnel_polhead_init()
6031 create_tunnel_policy(char *name, int *errno, uint64_t *gen, netstack_t *ns)  in create_tunnel_policy()  argument
6035 	ipsec_stack_t *ipss = ns->netstack_ipsec;  in create_tunnel_policy()
6054 		itp_free(newbie, ns);  in create_tunnel_policy()
6076 	if (!tunnel_polhead_init(newbie->itp_policy, ns)) {  in create_tunnel_policy()
6080 	} else if (!tunnel_polhead_init(newbie->itp_inactive, ns)) {  in create_tunnel_policy()
6081 		IPPH_REFRELE(newbie->itp_policy, ns);  in create_tunnel_policy()