1
0
mirror of https://git.FreeBSD.org/src.git synced 2025-01-09 13:42:56 +00:00
freebsd/sys
Navdeep Parhar d6da836201 Add support for hardware filters to cxgb(4). The T3 chip can inspect
L2/3/4 headers and can drop or steer packets as instructed.  Filtering
based on src ip, dst ip, src port, dst port, 802.1q, udp/tcp, and mac
addr is possible.  Add support in cxgbtool to program these filters.
Some simple examples:

Drop all tcp/80 traffic coming from the subnet specified.
# cxgbtool cxgb2 filter 0 sip 192.168.1.0/24 dport 80 type tcp action drop

Steer all incoming UDP traffic to qset 0.
# cxgbtool cxgb2 filter 1 type udp queue 0 action pass

Steer all tcp traffic from 192.168.1.1 to qset 1.
# cxgbtool cxgb2 filter 2 sip 192.168.1.1 type tcp queue 1 action pass

Drop fragments.
# cxgbtool cxgb2 filter 3 type frag action drop

List all filters.
# cxgbtool cxgb2 filter list
index         SIP                DIP     sport dport VLAN PRI P/MAC type Q
    0     192.168.1.0/24         0.0.0.0     *    80    0 0/1 */*    tcp -
    1         0.0.0.0/0          0.0.0.0     *     *    0 0/1 */*    udp 0
    2     192.168.1.1/32         0.0.0.0     *     *    0 0/1 */*    tcp 1
    3         0.0.0.0/0          0.0.0.0     *     *    0 0/1 */*   frag -
16367         0.0.0.0/0          0.0.0.0     *     *    0 0/1 */*      * *

MFC after:	2 weeks
2010-05-05 00:41:40 +00:00
..
amd64 Style and comment adjustements. 2010-05-03 14:30:49 +00:00
arm Add support for FA626TE. 2010-05-04 10:14:05 +00:00
boot Remove if_ar, if_ray, if_sr, if_ppp, if_sl to reflect the current modules 2010-05-04 19:58:55 +00:00
bsm
cam Make SATA XPT negotiate and enable some additional SATA features, such as: 2010-05-02 12:07:47 +00:00
cddl Speed up ZFS list operation with objset prefetching. 2010-05-04 17:40:24 +00:00
compat - #ifdef out the cliplist part, skype seems like using an uninitialized 2010-05-03 14:19:58 +00:00
conf Add support for FA626TE. 2010-05-04 10:14:05 +00:00
contrib MFP4: @176978-176982, 176984, 176990-176994, 177441 2010-04-29 11:52:42 +00:00
crypto
ddb Move two copies of the same definition to a common include file. 2010-04-14 23:06:07 +00:00
dev Add support for hardware filters to cxgb(4). The T3 chip can inspect 2010-05-05 00:41:40 +00:00
fs Lock the page around vm_page_activate() and vm_page_deactivate() calls 2010-05-03 20:31:13 +00:00
gdb
geom Re-calculate a geometry when reprobing as well. 2010-04-25 01:56:39 +00:00
gnu
i386 merge 194209 in to the i386/xen pmap 2010-04-30 03:26:12 +00:00
ia64 On Alan's advice, rather than do a wholesale conversion on a single 2010-04-30 00:46:43 +00:00
isa
kern Add page locking to the vm_page_cow* functions. 2010-05-04 15:55:41 +00:00
kgssapi
libkern Switch to our preferred 2-clause BSD license. 2010-04-07 16:50:38 +00:00
mips Add new tunable 'net.link.ifqmaxlen' to set default send interface 2010-05-03 07:32:50 +00:00
modules Import mvs(4) - Marvell 88SX50XX/88SX60XX/88SX70XX/SoC SATA controllers 2010-05-02 19:28:30 +00:00
net Add page locking to the vm_page_cow* functions. 2010-05-04 15:55:41 +00:00
net80211 Add new tunable 'net.link.ifqmaxlen' to set default send interface 2010-05-03 07:32:50 +00:00
netatalk
netgraph When destroying a vnet, shut down all netgraph nodes tied to that vnet 2010-05-03 16:08:24 +00:00
netinet MFP4: @176978-176982, 176984, 176990-176994, 177441 2010-04-29 11:52:42 +00:00
netinet6 MFP4: @176978-176982, 176984, 176990-176994, 177441 2010-04-29 11:52:42 +00:00
netipsec MFP4: @176978-176982, 176984, 176990-176994, 177441 2010-04-29 11:52:42 +00:00
netipx
netnatm
netncp Switch to our preferred 2-clause BSD license. 2010-04-07 16:50:38 +00:00
netsmb Switch to our preferred 2-clause BSD license. 2010-04-07 16:50:38 +00:00
nfs
nfsclient Lock the page around vm_page_activate() and vm_page_deactivate() calls 2010-05-03 20:31:13 +00:00
nfsserver
nlm
opencrypto
pc98 MFi386: revision 206553 2010-04-29 06:22:07 +00:00
pci Add new tunable 'net.link.ifqmaxlen' to set default send interface 2010-05-03 07:32:50 +00:00
powerpc MFamd64/i386 r207205 2010-04-30 15:22:52 +00:00
rpc
security Add a case to make sure that internal audit records get converted 2010-05-04 15:29:07 +00:00
sparc64 Add support for SPARC64 V (and where it already makes sense for other 2010-05-02 19:38:17 +00:00
sun4v On Alan's advice, rather than do a wholesale conversion on a single 2010-04-30 00:46:43 +00:00
sys Implement RUSAGE_THREAD. Add td_rux to keep extended runtime and ticks 2010-05-04 05:55:37 +00:00
teken Just use <stdint.h> instead of <inttypes.h>. We don't need it here. 2010-04-03 17:22:28 +00:00
tools
ufs ffs_vfsops: restore alphabetic order of options in ffs_opts 2010-04-29 10:04:00 +00:00
vm Add page locking to the vm_page_cow* functions. 2010-05-04 15:55:41 +00:00
x86 Fix another instance of lapic_cyclic_clock_func. 2010-04-20 21:04:57 +00:00
xdr
xen
Makefile