1f44b0a1b5
have already done this, so I have styled the patch on their work:
1) introduce a ip_newid() static inline function that checks
the sysctl and then decides if it should return a sequential
or random IP ID.
2) named the sysctl net.inet.ip.random_id
3) IPv6 flow IDs and fragment IDs are now always random.
Flow IDs and frag IDs are significantly less common in the
IPv6 world (ie. rarely generated per-packet), so there should
be smaller performance concerns.
The sysctl defaults to 0 (sequential IP IDs).
Reviewed by: andre, silby, mlaier, ume
Based on: NetBSD
MFC after: 2 months
|
||
|---|---|---|
| .. | ||
| if_pflog.c | ||
| if_pflog.h | ||
| if_pfsync.c | ||
| if_pfsync.h | ||
| pf_if.c | ||
| pf_ioctl.c | ||
| pf_norm.c | ||
| pf_osfp.c | ||
| pf_subr.c | ||
| pf_table.c | ||
| pf.c | ||
| pfvar.h | ||