1
0
mirror of https://git.FreeBSD.org/src.git synced 2024-12-24 11:29:10 +00:00
freebsd/sys/netinet6
Jonathan Lemon be2ac88c59 Introduce a syncache, which enables FreeBSD to withstand a SYN flood
DoS in an improved fashion over the existing code.

Reviewed by: silby  (in a previous iteration)
Sponsored by: DARPA, NAI Labs
2001-11-22 04:50:44 +00:00
..
ah6.h
ah_core.c
ah_input.c Patches from KAME to remove usage of Varargs in existing 2001-09-07 07:19:12 +00:00
ah_output.c
ah.h Patches from KAME to remove usage of Varargs in existing 2001-09-07 07:19:12 +00:00
dest6.c
esp6.h
esp_core.c Fix fencepost error causing creation of 0-length mbufs when the boundary 2001-08-20 17:58:46 +00:00
esp_input.c Patches from KAME to remove usage of Varargs in existing 2001-09-07 07:19:12 +00:00
esp_output.c
esp_rijndael.c
esp_rijndael.h
esp.h Patches from KAME to remove usage of Varargs in existing 2001-09-07 07:19:12 +00:00
frag6.c
icmp6.c Make faith loadable, unloadable, and clonable. 2001-09-25 18:40:52 +00:00
icmp6.h
in6_cksum.c
in6_gif.c
in6_gif.h
in6_ifattach.c When running aplication joined multicast address, 2001-08-04 17:10:14 +00:00
in6_ifattach.h
in6_pcb.c Give struct socket structures a ref counting interface similar to 2001-11-17 03:07:11 +00:00
in6_pcb.h KSE Milestone 2 2001-09-12 08:38:13 +00:00
in6_prefix.c
in6_prefix.h
in6_proto.c gif(4) and stf(4) modernization: 2001-07-02 21:02:09 +00:00
in6_rmx.c
in6_src.c KSE Milestone 2 2001-09-12 08:38:13 +00:00
in6_var.h KSE Milestone 2 2001-09-12 08:38:13 +00:00
in6.c Make faith loadable, unloadable, and clonable. 2001-09-25 18:40:52 +00:00
in6.h Make faith loadable, unloadable, and clonable. 2001-09-25 18:40:52 +00:00
ip6_ecn.h
ip6_forward.c catch forwarded ipv6 packets with pfil_hooks for outbound things too 2001-10-15 14:16:18 +00:00
ip6_fw.c Fix fragmented packet handling. 2001-10-29 07:55:57 +00:00
ip6_fw.h
ip6_input.c Make faith loadable, unloadable, and clonable. 2001-09-25 18:40:52 +00:00
ip6_mroute.c Removed a wrong comment. 2001-09-20 08:04:21 +00:00
ip6_mroute.h
ip6_output.c KSE Milestone 2 2001-09-12 08:38:13 +00:00
ip6_var.h KSE Milestone 2 2001-09-12 08:38:13 +00:00
ip6.h
ip6protosw.h KSE Milestone 2 2001-09-12 08:38:13 +00:00
ipcomp6.h
ipcomp_core.c
ipcomp_input.c Patches from KAME to remove usage of Varargs in existing 2001-09-07 07:19:12 +00:00
ipcomp_output.c
ipcomp.h Patches from KAME to remove usage of Varargs in existing 2001-09-07 07:19:12 +00:00
ipsec6.h
ipsec.c Fixed the behavior when there is no inbound policy for the ipsec 2001-11-06 22:45:29 +00:00
ipsec.h
mld6_var.h
mld6.c
nd6_nbr.c
nd6_rtr.c Wrap array accesses in macros, which also happen to be lvalues: 2001-09-06 02:40:43 +00:00
nd6.c Pull post-4.4BSD change to sys/net/route.c from BSD/OS 4.2. 2001-10-17 18:07:05 +00:00
nd6.h Pull post-4.4BSD change to sys/net/route.c from BSD/OS 4.2. 2001-10-17 18:07:05 +00:00
pim6_var.h
pim6.h
raw_ip6.c Make faith loadable, unloadable, and clonable. 2001-09-25 18:40:52 +00:00
raw_ip6.h
README
route6.c
scope6_var.h
scope6.c
tcp6_var.h Introduce a syncache, which enables FreeBSD to withstand a SYN flood 2001-11-22 04:50:44 +00:00
udp6_output.c Make faith loadable, unloadable, and clonable. 2001-09-25 18:40:52 +00:00
udp6_usrreq.c o Replace reference to 'struct proc' with 'struct thread' in 'struct 2001-11-08 02:13:18 +00:00
udp6_var.h KSE Milestone 2 2001-09-12 08:38:13 +00:00

a note to committers about KAME tree
$FreeBSD$
KAME project


FreeBSD IPv6/IPsec tree is from KAMEproject (http://www.kame.net/).
To synchronize KAME tree and FreeBSD better today and in the future,
please understand the following:

- DO NOT MAKE COSTMETIC CHANGES.
  "Cosmetic changes" here includes tabify, untabify, removal of space at EOL,
  minor KNF items, and whatever adds more output lines on "diff freebsd kame".
  To make future synchronization easier. it is critical to preserve certain
  statements in the code.  Also, as KAME tree supports all 4 BSDs (Free, Open,
  Net, BSD/OS) in single shared tree, it is not always possible to backport
  FreeBSD changes into KAME tree.  So again, please do not make cosmetic
  changes.  Even if you think it a right thing, that will bite KAME guys badly
  during upgrade attempts, and prevent us from synchronizing two trees.
  (you don't usually make cosmetic changes against third-party code, do you?)

- REPORT CHANGES/BUGS TO KAME GUYS.
  It is not always possible for KAME guys to watch all the freebsd mailing
  list traffic, as the traffic is HUGE.  So if possible, please, inform
  kame guys of changes you made in IPv6/IPsec related portion.  Contact
  path would be snap-users@kame.net or KAME PR database on www.kame.net.
  (or to core@kame.net if it is necessary to make it confidential)

Thank you for your cooperation and have a happy IPv6 life!


Note: KAME-origin code is in the following locations.
The above notice applies to corresponding manpages too.
The list may not be complete.  If you see $KAME$ in the code, it is from
KAME distribution.  If you see some file that is IPv6/IPsec related, it is
highly possible that the file is from KAME distribution.

include/ifaddrs.h
lib/libc/net
lib/libc/net/getaddrinfo.c
lib/libc/net/getifaddrs.c
lib/libc/net/getnameinfo.c
lib/libc/net/ifname.c
lib/libc/net/ip6opt.c
lib/libc/net/map_v4v6.c
lib/libc/net/name6.c
lib/libftpio
lib/libipsec
sbin/ip6fw
sbin/ping6
sbin/rtsol
share/doc/IPv6
share/man/man4/ip6.4
share/man/man4/inet6.4
sys/crypto (except sys/crypto/rc4)
sys/kern/uipc_mbuf2.c
sys/net/if_faith.[ch]
sys/net/if_gif.[ch]
sys/net/if_stf.[ch]
sys/net/pfkeyv2.h
sys/netinet/icmp6.h
sys/netinet/in_gif.[ch]
sys/netinet/ip6.h
sys/netinet/ip_encap.[ch]
sys/netinet6
sys/netkey
usr.sbin/faithd
usr.sbin/gifconfig
usr.sbin/ifmcstat
usr.sbin/mld6query
usr.sbin/ndp
usr.sbin/pim6dd
usr.sbin/pim6sd
usr.sbin/prefix
usr.sbin/rip6query
usr.sbin/route6d
usr.sbin/rrenumd
usr.sbin/rtadvd
usr.sbin/rtsold
usr.sbin/scope6config
usr.sbin/setkey
usr.sbin/traceroute6