/illumos-gate/usr/src/uts/common/inet/ip/ |
H A D | ipsec_loader.c | 54 ipsec_stack_t *ipss = (ipsec_stack_t *)arg; in ipsec_loader() local 56 CALLB_CPR_INIT(&cprinfo, &ipss->ipsec_loader_lock, callb_generic_cpr, in ipsec_loader() 58 mutex_enter(&ipss->ipsec_loader_lock); in ipsec_loader() 64 while (ipss->ipsec_loader_sig == IPSEC_LOADER_WAIT) { in ipsec_loader() 66 cv_wait(&ipss->ipsec_loader_sig_cv, in ipsec_loader() 67 &ipss->ipsec_loader_lock); in ipsec_loader() 68 CALLB_CPR_SAFE_END(&cprinfo, &ipss->ipsec_loader_lock); in ipsec_loader() 72 if (ipss->ipsec_loader_sig == IPSEC_LOADER_EXITNOW) { in ipsec_loader() 77 ipss->ipsec_loader_state = IPSEC_LOADER_FAILED; in ipsec_loader() 78 ipss->ipsec_loader_sig = IPSEC_LOADER_WAIT; in ipsec_loader() [all …]
|
H A D | ipdrop.c | 48 ip_drop_init(ipsec_stack_t *ipss) in ip_drop_init() argument 50 ipss->ipsec_ip_drop_kstat = kstat_create_netstack("ip", 0, "ipdrop", in ip_drop_init() 53 KSTAT_FLAG_PERSISTENT, ipss->ipsec_netstack->netstack_stackid); in ip_drop_init() 55 if (ipss->ipsec_ip_drop_kstat == NULL || in ip_drop_init() 56 ipss->ipsec_ip_drop_kstat->ks_data == NULL) in ip_drop_init() 67 ipss->ipsec_ip_drop_types = ipss->ipsec_ip_drop_kstat->ks_data; in ip_drop_init() 70 kstat_named_init(&ipss->ipsec_ip_drop_types->ipds_tcp_clear, in ip_drop_init() 72 kstat_named_init(&ipss->ipsec_ip_drop_types->ipds_tcp_secure, in ip_drop_init() 74 kstat_named_init(&ipss->ipsec_ip_drop_types->ipds_tcp_mismatch, in ip_drop_init() 76 kstat_named_init(&ipss->ipsec_ip_drop_types->ipds_tcp_ipsec_alloc, in ip_drop_init() [all …]
|
H A D | spd.c | 152 void ipsec_fragcache_uninit(ipsec_fragcache_t *, ipsec_stack_t *ipss); 364 ipsec_stack_t *ipss = (ipsec_stack_t *)arg; in ipsec_stack_fini() local 367 netstack_t *ns = ipss->ipsec_netstack; in ipsec_stack_fini() 371 ipsec_loader_destroy(ipss); in ipsec_stack_fini() 373 rw_enter(&ipss->ipsec_tunnel_policy_lock, RW_WRITER); in ipsec_stack_fini() 382 avl_destroy_nodes(&ipss->ipsec_tunnel_policies, in ipsec_stack_fini() 386 avl_destroy(&ipss->ipsec_tunnel_policies); in ipsec_stack_fini() 387 rw_exit(&ipss->ipsec_tunnel_policy_lock); in ipsec_stack_fini() 388 rw_destroy(&ipss->ipsec_tunnel_policy_lock); in ipsec_stack_fini() 392 ipsec_kstat_destroy(ipss); in ipsec_stack_fini() [all …]
|
H A D | ipsecah.c | 175 ipsec_stack_t *ipss = ahstack->ipsecah_netstack->netstack_ipsec; in ah_kstat_init() local 210 IP_ACQUIRE_STAT(ipss, maxpackets, ipsacq_maxpackets); in ah_kstat_init() 220 ipsec_stack_t *ipss; in ah_kstat_update() local 232 ipss = ns->netstack_ipsec; in ah_kstat_update() 233 if (ipss == NULL) { in ah_kstat_update() 239 rw_enter(&ipss->ipsec_alg_lock, RW_READER); in ah_kstat_update() 240 ekp->ah_stat_num_aalgs.value.ui64 = ipss->ipsec_nalgs[IPSEC_ALG_AUTH]; in ah_kstat_update() 241 rw_exit(&ipss->ipsec_alg_lock); in ah_kstat_update() 537 ipsec_stack_t *ipss = ahstack->ipsecah_netstack->netstack_ipsec; in ah_register_out() local 564 rw_enter(&ipss->ipsec_alg_lock, RW_READER); in ah_register_out() [all …]
|
H A D | ipsecesp.c | 213 ipsec_stack_t *ipss; in esp_kstat_update() local 225 ipss = ns->netstack_ipsec; in esp_kstat_update() 226 if (ipss == NULL) { in esp_kstat_update() 232 rw_enter(&ipss->ipsec_alg_lock, RW_READER); in esp_kstat_update() 234 ipss->ipsec_nalgs[IPSEC_ALG_AUTH]; in esp_kstat_update() 236 ipss->ipsec_nalgs[IPSEC_ALG_ENCR]; in esp_kstat_update() 237 rw_exit(&ipss->ipsec_alg_lock); in esp_kstat_update() 730 ipsec_stack_t *ipss = espstack->ipsecesp_netstack->netstack_ipsec; in esp_strip_header() local 788 *counter = DROPPER(ipss, ipds_esp_bad_padlen); in esp_strip_header() 839 *counter = DROPPER(ipss, ipds_esp_bad_padlen); in esp_strip_header() [all …]
|
H A D | spdsock.c | 1929 spdsock_dump_iterate_next_tunnel(spdsock_t *ss, ipsec_stack_t *ipss) in spdsock_dump_iterate_next_tunnel() argument 1933 ASSERT(RW_READ_HELD(&ipss->ipsec_tunnel_policy_lock)); in spdsock_dump_iterate_next_tunnel() 1934 if (ipss->ipsec_tunnel_policy_gen > ss->spdsock_dump_tun_gen) { in spdsock_dump_iterate_next_tunnel() 1939 itp = avl_first(&ipss->ipsec_tunnel_policies); in spdsock_dump_iterate_next_tunnel() 1942 itp = AVL_NEXT(&ipss->ipsec_tunnel_policies, ss->spdsock_itp); in spdsock_dump_iterate_next_tunnel() 1948 ITP_REFRELE(ss->spdsock_itp, ipss->ipsec_netstack); in spdsock_dump_iterate_next_tunnel() 1962 ipsec_stack_t *ipss = ns->netstack_ipsec; in spdsock_dump_next_record() local 1995 rw_enter(&ipss->ipsec_tunnel_policy_lock, RW_READER); in spdsock_dump_next_record() 1996 itp = spdsock_dump_iterate_next_tunnel(ss, ipss); in spdsock_dump_next_record() 1998 rw_exit(&ipss->ipsec_tunnel_policy_lock); in spdsock_dump_next_record() [all …]
|
H A D | ip_sadb.c | 673 ipsec_stack_t *ipss = ns->netstack_ipsec; in ipsec_inbound_ah_sa() local 676 IP_AH_BUMP_STAT(ipss, in_requests); in ipsec_inbound_ah_sa() 701 IP_AH_BUMP_STAT(ipss, in_discards); in ipsec_inbound_ah_sa() 703 DROPPER(ipss, ipds_ah_bad_length), in ipsec_inbound_ah_sa() 704 &ipss->ipsec_dropper); in ipsec_inbound_ah_sa() 734 IP_AH_BUMP_STAT(ipss, lookup_failure); in ipsec_inbound_ah_sa() 735 IP_AH_BUMP_STAT(ipss, in_discards); in ipsec_inbound_ah_sa() 800 ipsec_stack_t *ipss = ns->netstack_ipsec; in ipsec_inbound_esp_sa() local 803 IP_ESP_BUMP_STAT(ipss, in_requests); in ipsec_inbound_esp_sa() 826 IP_ESP_BUMP_STAT(ipss, in_discards); in ipsec_inbound_esp_sa() [all …]
|
H A D | sadb.c | 255 ipsec_stack_t *ipss = ipsa->ipsa_netstack->netstack_ipsec; in sadb_freeassoc() local 258 ASSERT(ipss != NULL); in sadb_freeassoc() 269 DROPPER(ipss, ipds_sadb_inlarval_timeout), in sadb_freeassoc() 270 &ipss->ipsec_sadb_dropper); in sadb_freeassoc() 521 ipsec_stack_t *ipss = ns->netstack_ipsec; in sadbp_init() local 523 ip_drop_register(&ipss->ipsec_sadb_dropper, "IPsec SADB"); in sadbp_init() 798 ipsec_stack_t *ipss = ns->netstack_ipsec; in sadbp_destroy() local 800 ip_drop_unregister(&ipss->ipsec_sadb_dropper); in sadbp_destroy() 2950 ipsec_stack_t *ipss = ns->netstack_ipsec; local 3201 async = (ipss->ipsec_algs_exec_mode[IPSEC_ALG_AUTH] == [all …]
|
H A D | ip_input.c | 2356 ipsec_stack_t *ipss = ns->netstack_ipsec; in ip_fanout_v4() local 2504 if (CONN_INBOUND_POLICY_PRESENT(connp, ipss) || in ip_fanout_v4() 2670 if (CONN_INBOUND_POLICY_PRESENT(connp, ipss) || in ip_fanout_v4() 2690 DROPPER(ipss, ipds_esp_nat_t_ipsec), in ip_fanout_v4() 2691 &ipss->ipsec_dropper); in ip_fanout_v4() 2849 ipsec_stack_t *ipss = ns->netstack_ipsec; in ip_fanout_v4() local 2853 if (!ipsec_loaded(ipss)) { in ip_fanout_v4() 2888 DROPPER(ipss, ipds_esp_no_sa), in ip_fanout_v4() 2889 &ipss->ipsec_dropper); in ip_fanout_v4()
|
H A D | ip.c | 2080 ipsec_stack_t *ipss = ipst->ips_netstack->netstack_ipsec; in icmp_inbound_error_fanout_v4() local 2137 if (CONN_INBOUND_POLICY_PRESENT(connp, ipss) || in icmp_inbound_error_fanout_v4() 2179 if (!ipsec_loaded(ipss)) { in icmp_inbound_error_fanout_v4() 4863 ipsec_stack_t *ipss = ns->netstack_ipsec; in ip_fanout_send_icmp_v4() local 4875 if (secure || ipss->ipsec_inbound_v4_policy_present) { in ip_fanout_send_icmp_v4() 4958 ipsec_stack_t *ipss = ipst->ips_netstack->netstack_ipsec; in ip_fanout_proto_conn() local 4993 CONN_INBOUND_POLICY_PRESENT(connp, ipss) : in ip_fanout_proto_conn() 4994 CONN_INBOUND_POLICY_PRESENT_V6(connp, ipss)) || in ip_fanout_proto_conn() 5162 ipsec_stack_t *ipss = ipst->ips_netstack->netstack_ipsec; in zero_spi_check() local 5178 DROPPER(ipss, ipds_esp_nat_t_ka), &ipss->ipsec_dropper); in zero_spi_check() [all …]
|
H A D | ip6_input.c | 2001 ipsec_stack_t *ipss = ns->netstack_ipsec; in ip_fanout_v6() local 2157 if (CONN_INBOUND_POLICY_PRESENT_V6(connp, ipss) || in ip_fanout_v6() 2321 if (CONN_INBOUND_POLICY_PRESENT_V6(connp, ipss) || in ip_fanout_v6() 2642 ipsec_stack_t *ipss = ns->netstack_ipsec; in ip_fanout_v6() local 2646 if (!ipsec_loaded(ipss)) { in ip_fanout_v6()
|
H A D | ip6.c | 768 ipsec_stack_t *ipss = ipst->ips_netstack->netstack_ipsec; in icmp_inbound_error_fanout_v6() local 818 if (CONN_INBOUND_POLICY_PRESENT_V6(connp, ipss) || in icmp_inbound_error_fanout_v6() 863 if (!ipsec_loaded(ipss)) { in icmp_inbound_error_fanout_v6() 2395 ipsec_stack_t *ipss = ns->netstack_ipsec; in ip_fanout_send_icmp_v6() local 2407 if (secure || ipss->ipsec_inbound_v6_policy_present) { in ip_fanout_send_icmp_v6() 3144 ipsec_stack_t *ipss = ipst->ips_netstack->netstack_ipsec; in ipsec_early_ah_v6() local 3159 if (!ipsec_loaded(ipss)) { in ipsec_early_ah_v6()
|
/illumos-gate/usr/src/uts/common/inet/ |
H A D | sadb.h | 915 ipsec_stack_t *ipss; \ 917 ipss = assoc->ipsa_netstack->netstack_ipsec; \ 918 rw_enter(&ipss->ipsec_alg_lock, RW_READER); \ 920 rw_exit(&ipss->ipsec_alg_lock); \ 952 #define IP_ESP_BUMP_STAT(ipss, x) \ argument 954 if ((ipss)->ipsec_kstats != NULL) \ 955 ((ipss)->ipsec_kstats->esp_stat_ ## x).value.ui64++; \ 959 #define IP_AH_BUMP_STAT(ipss, x) \ argument 961 if ((ipss)->ipsec_kstats != NULL) \ 962 ((ipss)->ipsec_kstats->ah_stat_ ## x).value.ui64++; \ [all …]
|
H A D | ip.h | 786 #define CONN_INBOUND_POLICY_PRESENT(connp, ipss) \ argument 789 (ipss)->ipsec_inbound_v4_policy_present)) 791 #define CONN_INBOUND_POLICY_PRESENT_V6(connp, ipss) \ argument 794 (ipss)->ipsec_inbound_v6_policy_present)) 796 #define CONN_OUTBOUND_POLICY_PRESENT(connp, ipss) \ argument 799 (ipss)->ipsec_outbound_v4_policy_present)) 801 #define CONN_OUTBOUND_POLICY_PRESENT_V6(connp, ipss) \ argument 804 (ipss)->ipsec_outbound_v6_policy_present))
|
/illumos-gate/usr/src/uts/common/inet/tcp/ |
H A D | tcp_fusion.c | 464 ipsec_stack_t *ipss = ns->netstack_ipsec; in tcp_fuse_output() local 519 CONN_INBOUND_POLICY_PRESENT(peer_connp, ipss); in tcp_fuse_output() 526 CONN_INBOUND_POLICY_PRESENT_V6(peer_connp, ipss); in tcp_fuse_output()
|
H A D | tcp_output.c | 2767 ipsec_stack_t *ipss = tcps->tcps_netstack->netstack_ipsec; in tcp_xmit_listeners_reset() local 2781 policy_present = ipss->ipsec_inbound_v4_policy_present; in tcp_xmit_listeners_reset() 2785 policy_present = ipss->ipsec_inbound_v6_policy_present; in tcp_xmit_listeners_reset()
|
H A D | tcp_input.c | 5584 ipsec_stack_t *ipss = ipst->ips_netstack->netstack_ipsec; in tcp_reinput() local 5599 if (CONN_INBOUND_POLICY_PRESENT_V6(connp, ipss) || in tcp_reinput()
|
/illumos-gate/usr/src/uts/common/inet/sctp/ |
H A D | sctp_hash.c | 541 ipsec_stack_t *ipss = ns->netstack_ipsec; in ip_fanout_sctp() local 587 CONN_INBOUND_POLICY_PRESENT(connp, ipss) : in ip_fanout_sctp() 588 CONN_INBOUND_POLICY_PRESENT_V6(connp, ipss)) || in ip_fanout_sctp()
|
H A D | sctp_input.c | 3370 ipsec_stack_t *ipss = ns->netstack_ipsec; in sctp_check_in_policy() local 3373 policy_present = ipss->ipsec_inbound_v4_policy_present; in sctp_check_in_policy() 3377 policy_present = ipss->ipsec_inbound_v6_policy_present; in sctp_check_in_policy() 3523 ipsec_stack_t *ipss = ipst->ips_netstack->netstack_ipsec; in sctp_input() local 3542 CONN_INBOUND_POLICY_PRESENT(connp, ipss) : in sctp_input() 3543 CONN_INBOUND_POLICY_PRESENT_V6(connp, ipss)) || in sctp_input()
|
/illumos-gate/usr/src/cmd/mdb/common/modules/ip/ |
H A D | ip.c | 266 ip_stack_t ipss; in ips_to_stackid() local 269 if (mdb_vread(&ipss, sizeof (ipss), kaddr) == -1) { in ips_to_stackid() 273 kaddr = (uintptr_t)ipss.ips_netstack; in ips_to_stackid()
|