Home
last modified time | relevance | path

Searched refs:xfrm (Results 1 – 25 of 51) sorted by relevance

123

/linux/net/xfrm/
H A Dxfrm_sysctl.c9 net->xfrm.sysctl_aevent_etime = XFRM_AE_ETIME; in __xfrm_sysctl_init()
10 net->xfrm.sysctl_aevent_rseqth = XFRM_AE_SEQT_SIZE; in __xfrm_sysctl_init()
11 net->xfrm.sysctl_larval_drop = 1; in __xfrm_sysctl_init()
12 net->xfrm.sysctl_acq_expires = 30; in __xfrm_sysctl_init()
53 table[0].data = &net->xfrm.sysctl_aevent_etime; in xfrm_sysctl_init()
54 table[1].data = &net->xfrm.sysctl_aevent_rseqth; in xfrm_sysctl_init()
55 table[2].data = &net->xfrm.sysctl_larval_drop; in xfrm_sysctl_init()
56 table[3].data = &net->xfrm.sysctl_acq_expires; in xfrm_sysctl_init()
62 net->xfrm.sysctl_hdr = register_net_sysctl_sz(net, "net/core", table, in xfrm_sysctl_init()
64 if (!net->xfrm.sysctl_hdr) in xfrm_sysctl_init()
[all …]
H A Dxfrm_policy.c36 #include <net/xfrm.h>
79 /* xfrm inexact policy search tree:
501 spin_lock_bh(&net->xfrm.xfrm_state_lock); in xfrm_policy_kill()
505 spin_unlock_bh(&net->xfrm.xfrm_state_lock); in xfrm_policy_kill()
514 return __idx_hash(index, net->xfrm.policy_idx_hmask);
524 *dbits = net->xfrm.policy_bydst[dir].dbits4; in __get_hash_thresh()
525 *sbits = net->xfrm.policy_bydst[dir].sbits4; in __get_hash_thresh()
529 *dbits = net->xfrm.policy_bydst[dir].dbits6; in __get_hash_thresh()
530 *sbits = net->xfrm.policy_bydst[dir].sbits6; in __get_hash_thresh()
543 unsigned int hmask = net->xfrm in policy_hash_bysel()
2487 xfrm_tmpl_resolve_one(struct xfrm_policy * policy,const struct flowi * fl,struct xfrm_state ** xfrm,unsigned short family) xfrm_tmpl_resolve_one() argument
2558 xfrm_tmpl_resolve(struct xfrm_policy ** pols,int npols,const struct flowi * fl,struct xfrm_state ** xfrm,unsigned short family) xfrm_tmpl_resolve() argument
2667 xfrm_bundle_create(struct xfrm_policy * policy,struct xfrm_state ** xfrm,struct xfrm_dst ** bundle,int nx,const struct flowi * fl,struct dst_entry * dst) xfrm_bundle_create() argument
2864 struct xfrm_state *xfrm[XFRM_MAX_DEPTH]; xfrm_resolve_and_create_bundle() local
4084 const struct xfrm_state *xfrm = dst->xfrm; xfrm_get_dst_nexthop() local
[all...]
H A Dxfrm_state.c19 #include <net/xfrm.h>
36 rcu_dereference_protected((table), lockdep_is_held(&(net)->xfrm.xfrm_state_lock))
38 rcu_dereference_check((table), lockdep_is_held(&(net)->xfrm.xfrm_state_lock))
67 lockdep_assert_held(&net->xfrm.xfrm_state_lock); in xfrm_dst_hash()
69 return __xfrm_dst_hash(daddr, saddr, reqid, family, net->xfrm.state_hmask); in xfrm_dst_hash()
77 lockdep_assert_held(&net->xfrm.xfrm_state_lock); in xfrm_src_hash()
79 return __xfrm_src_hash(daddr, saddr, family, net->xfrm.state_hmask); in xfrm_src_hash()
86 lockdep_assert_held(&net->xfrm.xfrm_state_lock); in xfrm_spi_hash()
88 return __xfrm_spi_hash(daddr, spi, proto, family, net->xfrm.state_hmask); in xfrm_spi_hash()
93 lockdep_assert_held(&net->xfrm in xfrm_seq_hash()
[all...]
H A Dxfrm_nat_keepalive.c206 net = container_of(work, struct net, xfrm.nat_keepalive_work.work); in nat_keepalive_work()
211 schedule_delayed_work(&net->xfrm.nat_keepalive_work, in nat_keepalive_work()
253 schedule_delayed_work(&net->xfrm.nat_keepalive_work, 0); in xfrm_nat_keepalive_state_updated()
258 INIT_DELAYED_WORK(&net->xfrm.nat_keepalive_work, nat_keepalive_work); in xfrm_nat_keepalive_net_init()
264 disable_delayed_work_sync(&net->xfrm.nat_keepalive_work); in xfrm_nat_keepalive_net_fini()
H A Dxfrm_user.c2 /* xfrm_user.c: User interface to configure xfrm engine.
29 #include <net/xfrm.h>
44 return rcu_dereference_protected(net->xfrm.nlsk, sk->sk_net_refcnt); in xfrm_net_nlsk()
1003 x->replay_maxdiff = net->xfrm.sysctl_aevent_rseqth; in xfrm_state_construct()
1005 x->replay_maxage = (net->xfrm.sysctl_aevent_etime*HZ)/XFRM_AE_ETH_M; in xfrm_state_construct()
1610 struct sock *nlsk = rcu_dereference(net->xfrm.nlsk); in xfrm_spdinfo_msgsize()
1670 lseq = read_seqbegin(&net->xfrm.policy_hthresh.lock); in xfrm_set_spdinfo()
1672 spt4.lbits = net->xfrm.policy_hthresh.lbits4; in xfrm_set_spdinfo()
1673 spt4.rbits = net->xfrm.policy_hthresh.rbits4; in xfrm_set_spdinfo()
1674 spt6.lbits = net->xfrm in xfrm_set_spdinfo()
[all...]
H A Dxfrm_output.c502 struct xfrm_state *x = dst->xfrm; in xfrm_output_one()
580 x = dst->xfrm; in xfrm_output_one()
595 struct net *net = xs_net(skb_dst(skb)->xfrm); in xfrm_output_resume()
604 if (!skb_dst(skb)->xfrm) in xfrm_output_resume()
753 struct xfrm_state *x = skb_dst(skb)->xfrm; in xfrm_output()
/linux/tools/testing/selftests/drivers/net/hw/
H A Dipsec_vxlan.py25 def xfrm(args, host=None): function
91 xfrm(f"state add src {local_addr} dst {remote_addr} "
95 defer(xfrm, f"state del src {local_addr} dst {remote_addr} "
99 xfrm(f"state add src {remote_addr} dst {local_addr} "
103 defer(xfrm, f"state del src {remote_addr} dst {local_addr} "
107 xfrm(f"state add src {remote_addr} dst {local_addr} "
112 defer(xfrm, f"state del src {remote_addr} dst {local_addr} "
116 xfrm(f"state add src {local_addr} dst {remote_addr} "
121 defer(xfrm, f"state del src {local_addr} dst {remote_addr} "
125 xfrm(f"policy add src {local_addr} dst {remote_addr} "
[all …]
H A Drss_api.py320 def set_rss(cfg, xfrm, fh): argument
322 "input-xfrm": xfrm, "flow-hash": fh})
/linux/tools/testing/selftests/net/
H A Dxfrm_policy.sh38 …ip -net $ns xfrm policy add src $lnet dst $rnet dir out tmpl src $me dst $remote proto esp mode tu…
40 …ip -net $ns xfrm policy add src $rnet dst $lnet dir fwd tmpl src $remote dst $me proto esp mode tu…
52 …ip -net $ns xfrm state add src $remote dst $me proto esp spi $spi_in enc aes $KEY_AES auth sha1 …
53 …ip -net $ns xfrm state add src $me dst $remote proto esp spi $spi_out enc aes $KEY_AES auth sha1 …
75 ip -net $ns xfrm policy add src 10.1.0.0/24 dst 10.0.0.0/24 dir fwd priority 200 action block
78 ip -net $ns xfrm policy add src 10.2.0.0/24 dst 10.0.0.0/24 dir fwd priority 200 action block
81 ip -net $ns xfrm policy add src 10.2.0.0/23 dst 10.0.1.0/24 dir fwd priority 200 action block
107 ip -net $ns xfrm policy add src 10.1.0.0/24 dst 10.0.0.0/23 dir fwd priority 200 action block
112 …ip -net $ns xfrm policy add src 10.253.1.$((RANDOM%255))/$p dst 10.254.1.$((RANDOM%255))/$p dir fw…
122 ip -net $ns xfrm policy get src $lnet dst $rnet dir out > /dev/null
[all …]
H A Dl2tp.sh228 run_cmd $host_1 ip xfrm policy add \
232 run_cmd $host_1 ip xfrm policy add \
236 run_cmd $host_2 ip xfrm policy add \
240 run_cmd $host_2 ip xfrm policy add \
244 ip -netns $host_1 xfrm state add \
249 ip -netns $host_1 xfrm state add \
254 ip -netns $host_2 xfrm state add \
259 ip -netns $host_2 xfrm state add \
267 run_cmd $host_1 ip -6 xfrm policy add \
271 run_cmd $host_1 ip -6 xfrm policy add \
[all …]
H A Dvrf-xfrm-tests.sh197 ip -netns ${ns} xfrm ${x} flush
198 ip -6 -netns ${ns} xfrm ${x} flush
216 ip -netns $host1 xfrm policy add \
221 ip -netns $host2 xfrm policy add \
226 ip -netns $host1 xfrm policy add \
231 ip -netns $host2 xfrm policy add \
237 ip -6 -netns $host1 xfrm policy add \
242 ip -6 -netns $host2 xfrm policy add \
247 ip -6 -netns $host1 xfrm policy add \
252 ip -6 -netns $host2 xfrm policy add \
[all …]
H A Dxfrm_policy_add_speed.sh28 ip netns exec "$ns" ip xfrm policy flush
40 echo xfrm policy add src 10.$s.$j.0/30 dst 10.$d.$j.$a/$pfx dir $dir action block
45 echo xfrm policy add src 10.$s.$j.$a/30 dst 10.$d.$j.0/$pfx dir $dir action block
70 have=$(ip netns exec "$ns" ip xfrm policy show | grep "action block" | wc -l)
/linux/net/ipv6/
H A Dxfrm6_policy.c151 } while (xdst->u.dst.xfrm); in xfrm6_dst_ifdown()
192 .data = &init_net.xfrm.xfrm6_dst_ops.gc_thresh,
210 table[0].data = &net->xfrm.xfrm6_dst_ops.gc_thresh; in xfrm6_net_sysctl_init()
255 memcpy(&net->xfrm.xfrm6_dst_ops, &xfrm6_dst_ops_template, in xfrm6_net_init()
257 ret = dst_entries_init(&net->xfrm.xfrm6_dst_ops); in xfrm6_net_init()
263 dst_entries_destroy(&net->xfrm.xfrm6_dst_ops); in xfrm6_net_init()
271 dst_entries_destroy(&net->xfrm.xfrm6_dst_ops); in xfrm6_net_exit()
H A Dxfrm6_output.c64 struct xfrm_state *x = dst->xfrm; in __xfrm6_output()
/linux/net/netfilter/
H A Dxt_policy.c90 if (dst->xfrm == NULL) in match_policy_out()
93 for (i = 0; dst && dst->xfrm; in match_policy_out()
100 if (match_xfrm_state(dst->xfrm, e, family)) { in match_policy_out()
/linux/tools/testing/selftests/net/forwarding/
H A Dip6_forward_instats_vrf.sh151 ip xfrm policy add dst 2001:1:2::2/128 dir fwd action block
154 ip xfrm policy del dst 2001:1:2::2/128 dir fwd
/linux/include/net/
H A Dxfrm.h6 #include <linux/xfrm.h>
48 MODULE_ALIAS("xfrm-mode-" __stringify(family) "-" __stringify(encap))
50 MODULE_ALIAS("xfrm-type-" __stringify(family) "-" __stringify(proto))
52 MODULE_ALIAS("xfrm-offload-" __stringify(family) "-" __stringify(proto))
73 length setting, net->xfrm.policy_hthresh). Other policies are stored in
75 See net/xfrm/xfrm_policy.c for details.
88 dst -. xfrm .-> xfrm_state #1
89 |---. child .-> dst -. xfrm .-> xfrm_state #2
90 |---. child .-> dst -. xfrm .-> xfrm_state #3
504 * xfrm fo
[all...]
/linux/net/ipv4/
H A Dxfrm4_output.c20 struct xfrm_state *x = skb_dst(skb)->xfrm; in __xfrm4_output()
/linux/security/selinux/
H A Dxfrm.c214 x = dst->xfrm; in selinux_xfrm_skb_sid_egress()
454 struct xfrm_state *x = iter->xfrm; in selinux_xfrm_postroute_last()
H A DMakefile22 selinux-$(CONFIG_SECURITY_NETWORK_XFRM) += xfrm.o
/linux/Documentation/networking/
H A Dsecid.rst11 matching labeled xfrm(s).
H A Dindex.rst132 xfrm/index
/linux/net/core/
H A Ddst.c57 dst->xfrm = NULL; in dst_init()
107 if (dst->xfrm) { in dst_destroy()
/linux/tools/testing/selftests/net/netfilter/
H A Dnft_flowtable.sh807 ip -net "$ns" xfrm state add src "$remote" dst "$me" proto esp spi "$spi_in" enc aes "$KEY_AES" auth sha1 "$KEY_SHA" mode tunnel sel src "$rnet" dst "$lnet"
808 ip -net "$ns" xfrm state add src "$me" dst "$remote" proto esp spi "$spi_out" enc aes "$KEY_AES" auth sha1 "$KEY_SHA" mode tunnel sel src "$lnet" dst "$rnet"
811 ip -net "$ns" xfrm policy add src "$lnet" dst "$rnet" dir out tmpl src "$me" dst "$remote" proto esp mode tunnel priority 1 action allow
813 ip -net "$ns" xfrm policy add src "$rnet" dst "$lnet" dir fwd tmpl src "$remote" dst "$me" proto esp mode tunnel priority 1 action allow
/linux/net/
H A DMakefile19 obj-$(CONFIG_XFRM) += xfrm/

123