summaryrefslogtreecommitdiff
path: root/sys/net/npf/npf_ctl.c
AgeCommit message (Expand)Author
2020-05-30Major NPF improvements (merge from upstream):rmind
2019-09-30libnpf/npfctl: support dynamic NAT rulesets using a name prefix.rmind
2019-08-25 ake npfctl_switch() and pfil private to OS-specific module.rmind
2019-08-25- npfctl_load_nvlist: simplify the config loading logic.rmind
2019-08-21npfkern/libnpf: Add support for the table replace/swap operation.rmind
2019-08-11Adjust some internal NPF APIs:rmind
2019-07-23NPF improvements:rmind
2019-01-19Major NPF improvements:rmind
2018-10-29We need to have rump tests work in two modes:christos
2018-09-29NPF: Major rework -- migrate NPF to the libnv library.rmind
2017-12-10- npf_mk_rules: enforce unique names for the dynamic rulesets.rmind
2017-10-30Fix npfclt reload on rump kernelsozaki-r
2017-05-17Allow npf to be used "normally" from a rump kernel, not just from thechristos
2017-01-29- Increase copyin buffer size to 4Mchristos
2017-01-02NPF: implement dynamic handling of interface addresses (the kernel part).rmind
2016-12-26Sync NPF with the version on github: backport standalone NPF changes,christos
2016-12-10add functionality to lookup a nat entry from the connection list.christos
2015-10-28remove bogus KASSERT, there are error paths that don't satisfy this.christos
2015-06-08- npfctl: fix the confusion in the parser (0/0 case with no other filter).rmind
2015-03-20NPF: replace the TAILQ of the dynamic rules with a linked list and fix thermind
2014-08-24- npf_conn_import: add a missing stat counter increment.rmind
2014-08-11- Add and use npf_alg_export().rmind
2014-08-11NPF: finish up the rework of npfctl_save() mechanism.rmind
2014-08-10- Add npf_ruleset_export(), npf_rule_export() and npf_nat_policyexport().rmind
2014-07-25npf_mk_connlist: destroy the connections on error path.rmind
2014-07-23NPF: rework of the connection saving and restoring:rmind
2014-07-19NPF: partially rewrite the connection tracking mechanism:rmind
2014-02-06Add support for CDB based NPF tables.rmind
2013-11-12NPF: add support for table naming and remove NPF_TABLE_SLOTS (there isrmind
2013-11-08NPF: add support for specifying the interfaces before they are attached.rmind
2013-10-27Add NPF_MAX_RULES, an artificial limit (set it to 1M).rmind
2013-09-19NPF: G/C n-code in favour of BPF byte-code. Delete lots of code, mmm!rmind
2013-09-19- Convert NPF to use BPF byte-code by default. Compile BPF byte-code inrmind
2013-09-19npfctl_rule: fixes for the dynamic rules.rmind
2013-06-02- NPF connection tracking: rework synchronisation on tracking disable/enablermind
2013-05-19- Add NPF table flushing functionality.rmind
2013-03-20Make ALG's autoloadable by providing in the config file:christos
2013-02-16- Convert NPF dynamic rule ID to just incremented 64-bit counter.rmind
2013-02-10- Fix NPF config reload with dynamic rules present.rmind
2013-02-09NPF:rmind
2012-12-23- Add NPF version check in proplist as well, not only ioctl. Bump the version.rmind
2012-10-29Implement NPF table listing and preservation of entries on reload.rmind
2012-09-16Implement dynamic NPF extensions interface. An extension consists ofrmind
2012-08-15- {npf_mk_rproc,npf_nat_save}: fix the fetching of {rproc-ptr,id_ptr}.rmind
2012-07-15- Rework NPF tables and fix support for IPv6. Implement tree table typermind
2012-05-30npftest: add a stream processor, which prints out the TCP state information.rmind
2012-03-11- Save active config in proplib dictionary; add GETCONF ioctl to retrieve.rmind
2012-02-20- Add NPF_DECISION_BLOCK and NPF_DECISION_PASS. Be more defensive in thermind
2012-02-05Multiple NPF fixes, add better error reporting from kernel side, add somermind
2012-01-15- Expire all sessions on flush.rmind