1
0
mirror of https://git.FreeBSD.org/src.git synced 2025-01-25 16:13:17 +00:00
freebsd/sbin
Alexander V. Chernikov f8bee51a69 - Add ipfw eXtended tables permitting radix to be used for any kind of keys.
- Add support for IPv6 and interface extended tables
- Make number of tables to be loader tunable in range 0..65534.
- Use IP_FW3 opcode for all new extended table cmds

No ABI changes are introduced. Old userland will see valid tables for
IPv4 tables and no entries otherwise. Flush works for any table.

IP_FW3 socket option is used to encapsulate all new opcodes:
 /* IP_FW3 header/opcodes */
 typedef struct _ip_fw3_opheader {
        uint16_t opcode;        /* Operation opcode */
        uint16_t reserved[3];   /* Align to 64-bit boundary */
 } ip_fw3_opheader;

New opcodes added:
 IP_FW_TABLE_XADD, IP_FW_TABLE_XDEL, IP_FW_TABLE_XGETSIZE, IP_FW_TABLE_XLIST

ipfw(8) table argument parsing behavior is changed:
 'ipfw table 999 add host' now assumes 'host' to be interface name instead of
 hostname.

New tunable:
 net.inet.ip.fw.tables_max controls number of table supported by ipfw in given
 VNET instance. 128 is still the default value.

New syntax:
ipfw add skipto tablearg ip from any to any via table(42) in
ipfw add skipto tablearg ip from any to any via table(4242) out

This is a bit hackish, special interface name '\1' is used to signal interface
table number is passed in p.glob field.

Sponsored by Yandex LLC

Reviewed by:    ae
Approved by:    ae (mentor)

MFC after:      4 weeks
2012-03-12 14:07:57 +00:00
..
adjkerntz Fix a variety of grammar and style nits 2012-03-09 01:32:05 +00:00
atacontrol
atm In sbin/atm/atmconfig/diag.c, fix a few warnings about format strings 2011-12-17 00:26:45 +00:00
badsect
bsdlabel Globally replace u_int*_t from (non-contributed) man pages. 2012-02-12 18:29:56 +00:00
camcontrol Fix build when RELEASE_CRUNCH is defined. 2012-01-29 09:12:34 +00:00
ccdconfig
clri
comcontrol
conscontrol
ddb
devd Fix build. 2012-01-06 15:01:05 +00:00
devfs Spelling fixes for sbin/ 2012-01-07 16:09:33 +00:00
dhclient Spelling fixes for sbin/ 2012-01-07 16:09:33 +00:00
dmesg
dump Replace index() and rindex() calls with strchr() and strrchr(). 2012-01-03 18:51:58 +00:00
dumpfs Add missing -l flag to usage(). 2011-12-26 16:47:45 +00:00
dumpon
fdisk
fdisk_pc98
ffsinfo
fsck
fsck_ffs Be more helpful about alternate superblocks. 2012-02-10 12:01:19 +00:00
fsck_msdosfs
fsdb Partially undo r228693, by removing NO_WFORMAT.clang in fsdb's Makefile, 2012-03-09 21:02:39 +00:00
fsirand Fix warning when compiling with gcc46: 2012-01-10 02:59:43 +00:00
gbde Use NO_WCAST_ALIGN for sbin/gbde, this is more appropriate to fix the 2011-12-17 00:14:40 +00:00
geom Fix a variety of grammar issues and style nits. 2012-03-04 16:37:44 +00:00
ggate
growfs After r232548, clang complains about the apparent '=-' operator (a 2012-03-12 11:15:44 +00:00
gvinum Fix warning when compiling with gcc46: 2012-01-10 02:59:26 +00:00
hastctl For functions that return -1 on failure check exactly for -1 and not for 2012-01-10 22:39:07 +00:00
hastd Nice range comparison. 2012-02-11 16:41:52 +00:00
ifconfig Fix typo and bump the document date which I also forgot. 2012-03-07 06:25:17 +00:00
init Fix whitespace. 2012-03-11 22:30:06 +00:00
ipf Use both NO_WFORMAT and NO_WARRAY_BOUNDS for sbin/ipf, it would be too 2011-12-17 00:54:09 +00:00
ipfw - Add ipfw eXtended tables permitting radix to be used for any kind of keys. 2012-03-12 14:07:57 +00:00
iscontrol Whitespace cleanup: 2012-02-25 15:21:43 +00:00
kldconfig
kldload
kldstat
kldunload
ldconfig
mca
md5
mdconfig Rewrite option parsing in mdconfig(8). This makes it more user-friendly 2012-01-27 11:48:44 +00:00
mdmfs Spelling fixes for sbin/ 2012-01-07 16:09:33 +00:00
mknod
mksnap_ffs
mount Don't print the nmount(2) provided error message if it is empty. 2012-01-20 12:59:12 +00:00
mount_cd9660 Change checkpath() to not exit on error. This is a prerequisite for 2012-01-16 19:34:21 +00:00
mount_ext2fs Change checkpath() to not exit on error. This is a prerequisite for 2012-01-16 19:34:21 +00:00
mount_hpfs
mount_msdosfs Change checkpath() to not exit on error. This is a prerequisite for 2012-01-16 19:34:21 +00:00
mount_nfs Add a timeout on positive name cache entries in the NFS client. That is, 2012-01-25 20:05:58 +00:00
mount_ntfs Remove trailing whitespace. 2012-01-28 13:41:34 +00:00
mount_nullfs Change checkpath() to not exit on error. This is a prerequisite for 2012-01-16 19:34:21 +00:00
mount_reiserfs Change checkpath() to not exit on error. This is a prerequisite for 2012-01-16 19:34:21 +00:00
mount_std Change checkpath() to not exit on error. This is a prerequisite for 2012-01-16 19:34:21 +00:00
mount_udf Change checkpath() to not exit on error. This is a prerequisite for 2012-01-16 19:34:21 +00:00
mount_unionfs Change checkpath() to not exit on error. This is a prerequisite for 2012-01-16 19:34:21 +00:00
natd
newfs Fix warning when compiling with gcc46: 2012-01-10 02:59:09 +00:00
newfs_msdos Globally replace u_int*_t from (non-contributed) man pages. 2012-02-12 18:29:56 +00:00
nfsiod
nos-tun
pfctl
pflogd
ping
ping6 Fix warning when compiling with gcc46: 2012-01-10 02:59:01 +00:00
quotacheck
rcorder Add more static keywords to rcorder(8). 2011-12-11 20:48:40 +00:00
reboot Add BSD copyright notice. 2012-02-07 14:06:30 +00:00
recoverdisk Fix mdoc date from previous commit. 2012-01-06 11:42:03 +00:00
resolvconf
restore
route Fix a possible infinite loop in "route flush" on 64-bit archs. 2012-02-04 17:53:22 +00:00
routed Fix a style bug 2012-01-13 06:56:59 +00:00
rtsol
savecore
sconfig
setkey
shutdown Replace index() and rindex() calls with strchr() and strrchr(). 2012-01-03 18:51:58 +00:00
spppcontrol
sunlabel
swapon
sysctl
tunefs Fix warning when compiling with gcc46: 2012-01-10 02:58:52 +00:00
umount
Makefile
Makefile.amd64
Makefile.arm
Makefile.i386
Makefile.ia64
Makefile.inc
Makefile.mips
Makefile.pc98
Makefile.sparc64