Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | | Indicate support for processing ESPv3 TFC padding in Netlink IPsec backend | Martin Willi | 2013-03-01 | 1 | -1/+7 | |
| | | ||||||
* | | Introduce "features" for the kernel backends returning kernel capabilities | Martin Willi | 2013-03-01 | 4 | -1/+52 | |
|/ | ||||||
* | kernel-netlinks get_interface() considers virtual IPs, too | Martin Willi | 2012-12-17 | 1 | -0/+13 | |
| | | | | | | | When using load-tester, we can install tunnel outer addresses on demand. As these are installed as "virtual", we have to consider virtual IPs in the get_interface() lookup to install "real" virtual IPs to these dynamic external addresses. | |||||
* | Don't wait while removing external IPs used for load testing | Martin Willi | 2012-11-29 | 5 | -7/+13 | |
| | ||||||
* | Install virtual IPs via interface name, and use an interface lookup where ↵ | Martin Willi | 2012-11-29 | 5 | -18/+10 | |
| | | | | required | |||||
* | Add an optional kernel-interface parameter to install IPs with a custom prefix | Martin Willi | 2012-11-29 | 5 | -16/+23 | |
| | ||||||
* | libhydra can be initialized more than once | Martin Willi | 2012-11-14 | 2 | -3/+30 | |
| | ||||||
* | Limit recursion when searching for source addresses | Tobias Brunner | 2012-11-13 | 1 | -5/+14 | |
| | | | | | This could be required if e.g. two default routes list gateways but the corresponding outbound interfaces do not have any IP addresses on them. | |||||
* | Don't call get_route recursively if a route's gateway matches the destination | Tobias Brunner | 2012-11-13 | 1 | -2/+5 | |
| | ||||||
* | Moved debug.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 15 | -15/+15 | |
| | ||||||
* | Moved enum_name_t to utils folder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 | |
| | ||||||
* | Moved chunk_t to utils folder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 | |
| | ||||||
* | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 12 | -17/+17 | |
| | ||||||
* | Moved host_t and host_resolver_t to a new networking subfolder | Tobias Brunner | 2012-10-24 | 10 | -10/+10 | |
| | ||||||
* | Use a helper function to add milliseconds to timeval structs | Tobias Brunner | 2012-10-18 | 2 | -18/+3 | |
| | ||||||
* | Use proper offset when adding mark attribute in kernel-netlink plugin | Tobias Brunner | 2012-10-15 | 1 | -1/+1 | |
| | ||||||
* | Also add mark when querying current replay state in kernel-netlink plugin | Tobias Brunner | 2012-10-15 | 1 | -2/+21 | |
| | ||||||
* | Fixed update_sa in kernel-netlink plugin if marks are used | Tobias Brunner | 2012-10-11 | 1 | -0/+18 | |
| | ||||||
* | Added missing break statements in NAT-T mapping handling in PF_KEY plugin | Tobias Brunner | 2012-09-28 | 1 | -0/+2 | |
| | ||||||
* | Make sure we successfully opened xfrm_acq_expires | Tobias Brunner | 2012-09-28 | 1 | -1/+1 | |
| | ||||||
* | Clarified code when hashing/comparing cached policies in kernel-netlink | Tobias Brunner | 2012-09-28 | 1 | -5/+4 | |
| | ||||||
* | Make sure first argument is an int when using %.*s to print e.g. chunks | Tobias Brunner | 2012-09-28 | 1 | -3/+3 | |
| | ||||||
* | Ensure that pipe is closed when calling resolvconf(8) | Tobias Brunner | 2012-09-28 | 1 | -2/+4 | |
| | ||||||
* | Use proper argument for sizeof when copying replay state | Tobias Brunner | 2012-09-28 | 1 | -1/+1 | |
| | ||||||
* | Algorithm names are not always static anymore, avoid string overflows | Tobias Brunner | 2012-09-28 | 1 | -5/+10 | |
| | ||||||
* | Allow replay windows smaller than the default of 32 | Tobias Brunner | 2012-09-27 | 1 | -4/+6 | |
| | ||||||
* | Properly initialize cached address map in kernel-pfroute plugin | Tobias Brunner | 2012-09-27 | 1 | -0/+1 | |
| | ||||||
* | Fixed compilation of kernel-pfroute plugin | Tobias Brunner | 2012-09-27 | 1 | -4/+6 | |
| | ||||||
* | Don't check interface of inbound message if interfaces are not filtered | Tobias Brunner | 2012-09-24 | 2 | -5/+16 | |
| | | | | | We don't have a proper kernel-net interface on Android yet, so the check for a usable interface does not work there. | |||||
* | Make sure the if_name member of cached route entries is initialized to NULL | Tobias Brunner | 2012-09-22 | 2 | -4/+10 | |
| | ||||||
* | Use an rwlock in kernel-pfroute too | Tobias Brunner | 2012-09-21 | 1 | -13/+14 | |
| | ||||||
* | Use rwlock and rwlock_condvar to increase concurrency in kernel-netlink plugin | Tobias Brunner | 2012-09-21 | 1 | -58/+55 | |
| | ||||||
* | Use a separate mutex for cached routes in kernel-netlink plugin | Tobias Brunner | 2012-09-21 | 1 | -8/+15 | |
| | ||||||
* | Use a lock to safely check and update the time for the next roam event | Tobias Brunner | 2012-09-21 | 1 | -16/+28 | |
| | ||||||
* | Added an option to configure the interface on which virtual IP addresses are ↵ | Tobias Brunner | 2012-09-21 | 1 | -19/+29 | |
| | | | | installed | |||||
* | Changed how kernel-netlink handles virtual IP addresses | Tobias Brunner | 2012-09-21 | 1 | -248/+308 | |
| | | | | Also tried to avoid the use of enumerators. | |||||
* | Made IP address enumeration more flexible | Tobias Brunner | 2012-09-21 | 5 | -48/+45 | |
| | | | | Also added an option to enumerate addresses on ignored interfaces. | |||||
* | Use a hashtable to quickly check for usable IP addresses/interfaces | Tobias Brunner | 2012-09-21 | 2 | -85/+284 | |
| | ||||||
* | Filter ignored interfaces in kernel interfaces (for events, address ↵ | Tobias Brunner | 2012-09-21 | 4 | -61/+134 | |
| | | | | enumeration, etc.) | |||||
* | %any is never on a local interface | Tobias Brunner | 2012-09-21 | 2 | -0/+10 | |
| | ||||||
* | Make it easy to check if an address is locally usable via changed ↵ | Tobias Brunner | 2012-09-21 | 8 | -47/+53 | |
| | | | | get_interface() method | |||||
* | Don't ignore loopback devices and allow addresses on them being enumerated | Tobias Brunner | 2012-09-21 | 5 | -24/+28 | |
| | ||||||
* | Added options and a lookup function that will allow filtering of network ↵ | Tobias Brunner | 2012-09-21 | 3 | -3/+72 | |
| | | | | interfaces | |||||
* | Use source address in get_nexthop() call | Tobias Brunner | 2012-09-21 | 8 | -12/+19 | |
| | | | | | Otherwise the nexthop returned might belong to a different route than the one actually used with the current source address. | |||||
* | Source address lookup refactored | Tobias Brunner | 2012-09-21 | 1 | -146/+221 | |
| | | | | | | | Routes matching the destination are now first parsed and sorted by network prefix length. This list is then used to search for the best route with a matching preferred source address (if one is specified). This makes sure we really check all routes for that address. | |||||
* | Check routes with equal prefix if preferred source is specified | Tobias Brunner | 2012-09-21 | 1 | -2/+4 | |
| | ||||||
* | Try to find preferred source on interface if returned source does not match | Tobias Brunner | 2012-09-21 | 1 | -10/+29 | |
| | ||||||
* | Try to keep the given source address when looking up routes | Tobias Brunner | 2012-09-21 | 1 | -6/+32 | |
| | | | | | | This allows to pin the local end of an IKE_SA to an address that is not the physical address of an interface. Without this patch the local address would change to the physical address when roam events occur. | |||||
* | In mem_pool, check for an existing ID entry before creating a new one | Martin Willi | 2012-09-20 | 1 | -7/+10 | |
| | ||||||
* | Added algorithm lookup via kernel_interface_t to the various kernel interfaces | Tobias Brunner | 2012-09-13 | 3 | -16/+67 | |
| |