en Copyright 2015 Java http://kernelsources.org:8080/source/history/freebsd/sys/modules/ipfw/Makefile#e9ac41698b2f322d55ccf9da50a3596edb2c1800 Remove residual blank line at start of MakefileThis is a residual of the $FreeBSD$ removal.MFC After: 3 days (though I'll just run the command on the branches)Sponsored by: Netflix List of files: /freebsd/sys/modules/ipfw/Makefile Mon, 15 Jul 2024 06:46:32 +0200 Warner Losh <imp@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/ipfw/Makefile#031beb4e239bfce798af17f5fe8dba8bcaf13d99 sys: Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /freebsd/sys/modules/ipfw/Makefile Wed, 16 Aug 2023 19:54:58 +0200 Warner Losh <imp@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/ipfw/Makefile#5bb3134a8c21cb87b30e135ef168483f0333dabb Fix some modules to export more used symbolsand remove non-present symbols that are now reported by kmod_syms.awk.Reviewed by: emasteSponsored by: The FreeBSD FoundationMFC after: 1 weekDifferential revision: https://reviews.freebsd.org/D32878 List of files: /freebsd/sys/modules/ipfw/Makefile Sun, 07 Nov 2021 09:42:24 +0100 Konstantin Belousov <kib@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/ipfw/Makefile#a335f76f2a40a248df01e22422b84d707bfcc4a9 modules: a lot: need opt_kern_tls.hThis fixes the standalone build. List of files: /freebsd/sys/modules/ipfw/Makefile Thu, 30 Sep 2021 06:07:17 +0200 Kyle Evans <kevans@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/ipfw/Makefile#b99a6823204f0ecbefef21af585dde03c4d76ba1 Rework ipfw dynamic states implementation to be lockless on fast path.o added struct ipfw_dyn_info that keeps all needed for ipfw_chk and for dynamic states implementation information;o added DYN_LOOKUP_NEEDED() macro that can be used to determine the need of new lookup of dynamic states;o ipfw_dyn_rule now becomes obsolete. Currently it used to pass information from kernel to userland only.o IPv4 and IPv6 states now described by different structures dyn_ipv4_state and dyn_ipv6_state;o IPv6 scope zones support is added;o ipfw(4) now depends from Concurrency Kit;o states are linked with "entry" field using CK_SLIST. This allows lockless lookup and protected by mutex modifications.o the "expired" SLIST field is used for states expiring.o struct dyn_data is used to keep generic information for both IPv4 and IPv6;o struct dyn_parent is used to keep O_LIMIT_PARENT information;o IPv4 and IPv6 states are stored in different hash tables;o O_LIMIT_PARENT states now are kept separately from O_LIMIT and O_KEEP_STATE states;o per-cpu dyn_hp pointers are used to implement hazard pointers and they prevent freeing states that are locklessly used by lookup threads;o mutexes to protect modification of lists in hash tables now kept in separate arrays. 65535 limit to maximum number of hash buckets now removed.o Separate lookup and install functions added for IPv4 and IPv6 states and for parent states.o By default now is used Jenkinks hash function.Obtained from: Yandex LLCMFC after: 42 daysSponsored by: Yandex LLCDifferential Revision: https://reviews.freebsd.org/D12685 List of files: /freebsd/sys/modules/ipfw/Makefile Wed, 07 Feb 2018 19:59:54 +0100 Andrey V. Elsukov <ae@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/ipfw/Makefile#937d37fc6c80b2171091fc773eb40bab53d84648 Merge ^/head r325842 through r325998. List of files: /freebsd/sys/modules/ipfw/Makefile Sun, 19 Nov 2017 13:36:03 +0100 Hans Petter Selasky <hselasky@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/ipfw/Makefile#e11f0a0c4cb237f9442d0f3c68a1cca3db3a1136 Unconditionally enable support for O_IPSEC opcode.IPsec support can be loaded as kernel module, thus do not depend fromkernel option IPSEC and always build O_IPSEC opcode implementation asenabled.Obtained from: Yandex LLCMFC after: 1 weekSponsored by: Yandex LLC List of files: /freebsd/sys/modules/ipfw/Makefile Fri, 17 Nov 2017 23:40:02 +0100 Andrey V. Elsukov <ae@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/ipfw/Makefile#193d9e768ba63fcfb187cfd17f461f7d41345048 sys/modules: normalize .CURDIR-relative paths to SRCTOPThis simplifies make output/logicTested with: `cd sys/modules; make ALL_MODULES=` on amd64MFC after: 1 monthSponsored by: Dell EMC Isilon List of files: /freebsd/sys/modules/ipfw/Makefile Sat, 04 Mar 2017 11:10:17 +0100 Enji Cooper <ngie@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/ipfw/Makefile#27067774dce3388702a4cf744d7096c6fb71b688 Merge ^/head r303250 through r304235. List of files: /freebsd/sys/modules/ipfw/Makefile Tue, 16 Aug 2016 22:19:05 +0200 Dimitry Andric <dim@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/ipfw/Makefile#f76e5f2087e097d7eb612d831801082262533d2d MFhead @ r304061 List of files: /freebsd/sys/modules/ipfw/Makefile Sun, 14 Aug 2016 00:51:36 +0200 Enji Cooper <ngie@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/ipfw/Makefile#56132dcc0d6f2227a9f48fe1c1dce9bec9508f35 Move logging via BPF support into separate file.* make interface cloner VNET-aware;* simplify cloner code and use if_clone_simple();* migrate LOGIF_LOCK() to rmlock;* add ipfw_bpf_mtap2() function to pass mbuf to BPF;* introduce new additional ipfwlog0 pseudo interface. It differs from ipfw0 by DLT type used in bpfattach. This interface is intended to used by ipfw modules to dump packets with additional info attached. Currently pflog format is used. ipfw_bpf_mtap2() function uses second argument to determine which interface use for dumping. If dlen is equal to ETHER_HDR_LEN it uses old ipfw0 interface, if dlen is equal to PFLOG_HDRLEN - ipfwlog0 will be used.Obtained from: Yandex LLCSponsored by: Yandex LLC List of files: /freebsd/sys/modules/ipfw/Makefile Sat, 13 Aug 2016 17:41:04 +0200 Andrey V. Elsukov <ae@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/ipfw/Makefile#0edd2576c0e07f525c80e4aa5ff24350b55f18b7 MFHSponsored by: The FreeBSD Foundation List of files: /freebsd/sys/modules/ipfw/Makefile Sat, 16 Apr 2016 04:32:12 +0200 Glen Barber <gjb@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/ipfw/Makefile#2acdf79f5397a4bb7bfde3956a878a1956e0abfe Add External Actions KPI to ipfw(9).It allows implementing loadable kernel modules with new actions andwithout needing to modify kernel headers and ipfw(8). The moduleregisters its action handler and keyword string, that will be usedas action name. Using generic syntax user can add rules with thisaction. Also ipfw(8) can be easily modified to extend basic syntaxfor external actions, that become a part base system.Sample modules will coming soon.Obtained from: Yandex LLCSponsored by: Yandex LLC List of files: /freebsd/sys/modules/ipfw/Makefile Fri, 15 Apr 2016 00:51:23 +0200 Andrey V. Elsukov <ae@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/ipfw/Makefile#9268022b74279434ed6300244e3f977e56a8ceb5 Merge from head@274682 List of files: /freebsd/sys/modules/ipfw/Makefile Wed, 19 Nov 2014 02:07:58 +0100 Simon J. Gerraty <sjg@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/ipfw/Makefile#2a382033b5c379d4d57f4030f6045bbd5527a1e9 Reintegrate head@r273095Sponsored by: The FreeBSD Foundation List of files: /freebsd/sys/modules/ipfw/Makefile Tue, 14 Oct 2014 17:37:19 +0200 Glen Barber <gjb@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/ipfw/Makefile#c81ab40b6a5ceb35a5b0464cdc8108e5023ff76b Merge HEAD@r272944. List of files: /freebsd/sys/modules/ipfw/Makefile Sat, 11 Oct 2014 19:16:18 +0200 Alexander V. Chernikov <melifaro@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/ipfw/Makefile#ed6aacb51f2f3dbc514f8f5a5d05ae6ebe478aa0 IFC @r272887 List of files: /freebsd/sys/modules/ipfw/Makefile Sat, 11 Oct 2014 01:52:56 +0200 Neel Natu <neel@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/ipfw/Makefile#a13a821641cdf6c63f185239b8e167379135b851 Merge projects/ipfw to HEAD.Main user-visible changes are related to tables:* Tables are now identified by names, not numbers. There can be up to 65k tables with up to 63-byte long names.* Tables are now set-aware (default off), so you can switch/move them atomically with rules.* More functionality is supported (swap, lock, limits, user-level lookup, batched add/del) by generic table code.* New table types are added (flow) so you can match multiple packet fields at once.* Ability to add different type of lookup algorithms for particular table type has been added.* New table algorithms are added (cidr:hash, iface:array, number:array and flow:hash) to make certain types of lookup more effective.* Table value are now capable of holding multiple data fields for different tablearg usersPerformance changes:* Main ipfw lock was converted to rmlock* Rule counters were separated from rule itself and made per-cpu.* Radix table entries fits into 128 bytes* struct ip_fw is now more compact so more rules will fit into 64 bytes* interface tables uses array of existing ifindexes for faster matchABI changes:All functionality supported by old ipfw(8) remains functional. Old & new binaries can work together with the following restrictions:* Tables named other than ^\d+$ are shown as table(65535) in ruleset in old binariesInternal changes:.Changing table ids to numbers resulted in format modification for most sockopt codes. Old sopt format was compact, but very hard to extend (no versioning, inability to add more opcodes), so* All relevant opcodes were converted to TLV-based versioned IP_FW3-based codes.* The remaining opcodes were also converted to be able to eliminate all older opcodes at once* All IP_FW3 handlers uses special API instead of calling sooptcopy* directly to ease adding another communication methods* struct ip_fw is now different for kernel and userland* tablearg value has been changed to 0 to ease future extensions* table "values" are now indexes in special value array which holds extended data for given index* Batched add/delete has been added to tables code* Most changes has been done to permit batched rule addition.* interface tracking API has been added (started on demand) to permit effective interface tables operations* O(1) skipto cache, currently turned off by default at compile-time (eats 512K).* Several steps has been made towards making libipfw: * most of new functions were separated into "parse/prepare/show and actuall-do-stuff" pieces (already merged). * there are separate functions for parsing text string into "struct ip_fw" and printing "struct ip_fw" to supplied buffer (already merged).* Probably some more less significant/forgotten featuresMFC after: 1 monthSponsored by: Yandex LLC List of files: /freebsd/sys/modules/ipfw/Makefile Thu, 09 Oct 2014 21:32:35 +0200 Alexander V. Chernikov <melifaro@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/ipfw/Makefile#b1d105bc685185df31b91cac7ebe9331f8548195 Add pre-alfa version of DXR lookup module.It does build but (currently) does not work.This change is not intended to be merged along with other ipfw changes. List of files: /freebsd/sys/modules/ipfw/Makefile Sun, 21 Sep 2014 20:15:09 +0200 Alexander V. Chernikov <melifaro@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/ipfw/Makefile#246e7a2b6494cd991b08ac669ed761ecea0cc98c IFC @r269962Submitted by: Anish Gupta (akgupt3@gmail.com) List of files: /freebsd/sys/modules/ipfw/Makefile Tue, 02 Sep 2014 06:22:42 +0200 Neel Natu <neel@FreeBSD.org>