Commit Graph

51 Commits

Author SHA1 Message Date
Andre Oppermann
c94c54e4df Remove RFC1644 T/TCP support from the TCP side of the network stack.
A complete rationale and discussion is given in this message
and the resulting discussion:

 http://docs.freebsd.org/cgi/mid.cgi?4177C8AD.6060706

Note that this commit removes only the functional part of T/TCP
from the tcp_* related functions in the kernel.  Other features
introduced with RFC1644 are left intact (socket layer changes,
sendmsg(2) on connection oriented protocols)  and are meant to
be reused by a simpler and less intrusive reimplemention of the
previous T/TCP functionality.

Discussed on:	-arch
2004-11-02 22:22:22 +00:00
Andre Oppermann
27f15752ff Rephrase certain centences and sync description of default values to reality. 2004-10-23 18:37:23 +00:00
Maxim Konovalov
1e44bdd152 s/Oct /October/
Pointed out by:	ru
2004-10-13 12:05:33 +00:00
Maxim Konovalov
440eb923d0 Bump the date of the document. 2004-10-13 08:14:41 +00:00
Maxim Konovalov
4dfcafe73a Document net.inet.tcp.sack.initburst sysctl. 2004-10-12 13:52:46 +00:00
Andre Oppermann
24a098ea9b o Move the inflight sysctls to their own sub-tree under net.inet.tcp to be
more consistent with the other sysctls around it.
2004-08-03 13:54:11 +00:00
Maxim Konovalov
3ed6f7023e o Document net.inet.sack.enable sysctl. net.inet.sack.sackhole_limit
is not documented yet, it is not used at the moment and is the subject
of the future work.

Improved by:	ru
Not objected:	ps, jayanth
2004-07-10 17:55:13 +00:00
Mike Pritchard
c48524c2aa Spelling fixes. 2004-06-21 17:42:49 +00:00
Ruslan Ermilov
bf7f20c2b6 Assorted markup, spelling, and grammar fixes. 2004-06-16 08:33:57 +00:00
Simon L. B. Nielsen
ae4eb6f8e3 Correct the misuse of \- (mdoc(7) mathematical minus) when - (mdoc(7)
hyphen) is meant.

Mdoc(7) clue by:	ru
Reviewed by:		ru
2004-05-14 20:07:49 +00:00
Bruce M Simpson
88f6b0435e Shorten the name of the socket option used to enable TCP-MD5 packet
treatment.

Submitted by:	Vincent Jardin
2004-02-16 22:21:16 +00:00
Bruce M Simpson
6639682776 Spell tcp_signature_compute correctly. 2004-02-14 22:17:38 +00:00
Bruce M Simpson
1cfd4b5326 Initial import of RFC 2385 (TCP-MD5) digest support.
This is the first of two commits; bringing in the kernel support first.
This can be enabled by compiling a kernel with options TCP_SIGNATURE
and FAST_IPSEC.

For the uninitiated, this is a TCP option which provides for a means of
authenticating TCP sessions which came into being before IPSEC. It is
still relevant today, however, as it is used by many commercial router
vendors, particularly with BGP, and as such has become a requirement for
interconnect at many major Internet points of presence.

Several parts of the TCP and IP headers, including the segment payload,
are digested with MD5, including a shared secret. The PF_KEY interface
is used to manage the secrets using security associations in the SADB.

There is a limitation here in that as there is no way to map a TCP flow
per-port back to an SPI without polluting tcpcb or using the SPD; the
code to do the latter is unstable at this time. Therefore this code only
supports per-host keying granularity.

Whilst FAST_IPSEC is mutually exclusive with KAME IPSEC (and thus IPv6),
TCP_SIGNATURE applies only to IPv4. For the vast majority of prospective
users of this feature, this will not pose any problem.

This implementation is output-only; that is, the option is honoured when
responding to a host initiating a TCP session, but no effort is made
[yet] to authenticate inbound traffic. This is, however, sufficient to
interwork with Cisco equipment.

Tested with a Cisco 2501 running IOS 12.0(27), and Quagga 0.96.4 with
local patches. Patches for tcpdump to validate TCP-MD5 sessions are also
available from me upon request.

Sponsored by:	sentex.net
2004-02-11 04:26:04 +00:00
Ruslan Ermilov
fe08efe680 mdoc(7): Use the new feature of the .In macro. 2003-09-08 19:57:22 +00:00
Ruslan Ermilov
e91fabac7b mdoc(7) police: Tidy up the formatting. 2003-03-22 13:43:06 +00:00
Jeffrey Hsu
01f98321e6 Document the net.inet.tcp.rfc3390 sysctl variable. 2003-03-13 01:44:58 +00:00
Jeffrey Hsu
edcd017d67 Document the net.inet.tcp.rfc3042 sysctl variable. 2003-03-12 20:44:06 +00:00
Jens Schweikhardt
d64ada501a Fix typos, mostly s/ an / a / where appropriate and a few s/an/and/
Add FreeBSD Id tag where missing.
2002-12-30 21:18:15 +00:00
Jens Schweikhardt
57bd0fc6e8 english(4) police. 2002-12-27 12:15:40 +00:00
Ruslan Ermilov
074ad11567 Spelling: s/then/than/ where appropriate. 2002-12-24 16:52:31 +00:00
Ruslan Ermilov
3f104b8bc1 Added xref to syncache(4). 2002-12-23 14:51:18 +00:00
Ruslan Ermilov
62b8571154 mdoc(7) police: markup and grammar fixes for previous delta. 2002-12-23 14:50:31 +00:00
Matthew Dillon
d7ff8ef62a Change tcp.inflight_min from 1024 to a production default of 6144. Create
a sysctl for the stabilization value for the bandwidth delay product (inflight)
algorithm and document it.

MFC after:	3 days
2002-12-14 21:00:17 +00:00
Ruslan Ermilov
d962d52ac0 mdoc(7) police: scheduled sweep.
Approved by:	re
2002-11-29 11:39:20 +00:00
Matthew Dillon
667137d174 Add A section on the retransmit timer sysctls.
MFC after:	3 days
2002-08-25 01:51:57 +00:00
Matthew Dillon
e1583529ee Oops, last manual commit was to -stable, should have been to -current.
No biggy, the code MFC to stable will catch up to the docs in a week.

X-MFC after:    -7 days
2002-08-17 20:44:24 +00:00
Yaroslav Tykhiy
60af6add19 Describe possible values for net.inet.tcp.log_in_vain
and their effects.

PR:		docs/35932
Submitted by:	Alex Semenyaka <alexs@ratmir.ru>
MFC after:	1 week
2002-04-16 13:19:33 +00:00
Mike Silbersack
102b06f844 Update documentation relating to sysctls in a post-syncache
world.  Goodbye tcp.tcp_lq_overflow and tcp.strict_rfc1948,
hello tcp.syncookies.

MFC after:	3 days
2002-04-10 19:52:21 +00:00
Mike Pritchard
f87717fa8b Ispell sweep of share/man/man4. 2002-01-21 12:09:13 +00:00
Robert Watson
080c70c1b1 o Clarify that various sysctl timing values are in milliseconds. 2002-01-19 03:44:42 +00:00
Ruslan Ermilov
32eef9aeb1 mdoc(7) police: Use the new .In macro for #include statements. 2001-10-01 16:09:29 +00:00
Bruce A. Mah
99045818e1 Document two sysctl variables used by RFC 1948 functionality.
While I'm here, fix two markup inconsistencies.

Submitted by:	silby
2001-09-06 22:50:12 +00:00
Jens Schweikhardt
c1f3e4bf21 Removed whitespace at end-of-line; no content changes. I simply did
cd src/share; find man[1-9] -type f|xargs perl -pi -e 's/[ \t]+$//'

BTW, what editors are the culprits? I'm using vim and it shows
me whitespace at EOL in troff files with a thick blue block...

Reviewed by:	Silence from cvs diff -b
MFC after:	7 days
2001-07-14 19:41:16 +00:00
Ruslan Ermilov
3d45e180f4 mdoc(7) police: removed HISTORY info from the .Os call. 2001-07-10 15:31:11 +00:00
Ruslan Ermilov
5521ff5a4d mdoc(7) police: sort SEE ALSO xrefs (sort -b -f +2 -3 +1 -2). 2001-07-06 16:46:48 +00:00
Ruslan Ermilov
4c7bd38fbe Describe all current net.inet.tcp MIB variables.
Submitted by:	jlemon
MFC after:	1 week
2001-05-17 17:53:21 +00:00
Dima Dorfman
ef0180ed69 mdoc(7) police: rename the DIAGNOSTICS section to ERRORS to match the
content, and correct the parameters to the -tag list therein.

Reviewed by:	ru
2001-04-13 19:49:07 +00:00
Ruslan Ermilov
e207e465df Prepare for mdoc(7)NG. 2001-01-16 09:32:40 +00:00
Sheldon Hearn
f5b5fc6c75 Document the NewReno sysctl knob.
Submitted by:	jlemon
2000-06-02 13:12:36 +00:00
Sheldon Hearn
0f5fcaa3f1 Supply only one author name per instance of %A, as per mdoc.samples(7).
PR:		18465
Submitted by:	Kazu TAKAMUNE <takamune@avrl.mei.co.jp>
2000-05-10 09:49:04 +00:00
Peter Wemm
7f3dea244c $Id$ -> $FreeBSD$ 1999-08-28 00:22:10 +00:00
Geoff Rehmet
e760dabd67 Document a whole truckload of sysctl MIBs under net.inet.tcp,
including tcp.blackhole, tcp.log_in_vain and others.
1999-08-17 14:54:26 +00:00
Bruce Evans
ddbd069887 Fixed missing #include(s) (mostly of <sys/types.h> in synopsis).
Reviewed by:	wollman
1997-03-19 19:47:43 +00:00
Peter Wemm
e25aeca937 Revert $FreeBSD$ back to $Id$ 1997-02-22 13:26:29 +00:00
Jordan K. Hubbard
1130b656e5 Make the long-awaited change from $Id$ to $FreeBSD$
This will make a number of things easier in the future, as well as (finally!)
avoiding the Id-smashing problem which has plagued developers for so long.

Boy, I'm glad we're not using sup anymore.  This update would have been
insane otherwise.
1997-01-14 07:20:47 +00:00
Wolfram Schneider
0b992c1d66 Sort cross references. 1996-12-26 16:16:37 +00:00
Mike Pritchard
edf0e5b3f8 Correct some man page xrefs, and some other minor changes to bring some
man pages up to mdoc guidelines and fix some minor formatting glitches.
Also fixed a number of man pages to not abuse the .Xr macro to
display functions and path names and a lot of other junk.
1996-04-08 04:18:31 +00:00
Garrett Wollman
d69128d862 Document Transaction TCP. 1995-02-15 22:07:28 +00:00
Garrett Wollman
a2cc1fa205 Document TCP MIB variables (tcp.4).
Document IP MIB variables (inet.4).
Document Internet-family protocol-specified route cloning (inet.4).
Delete all references to classed addresses (inet.4).
1995-02-15 03:30:54 +00:00
Garrett Wollman
e0e878ae9e Document EAFNOSUPPORT error return for TCP bind and connect operations. 1994-12-15 20:54:28 +00:00