freebsd-nq/sbin/ipfw
Patrick Kelsey 249cc75fd1 Extended pf(4) ioctl interface and pfctl(8) to allow bandwidths of
2^32 bps or greater to be used.  Prior to this, bandwidth parameters
would simply wrap at the 2^32 boundary.  The computations in the HFSC
scheduler and token bucket regulator have been modified to operate
correctly up to at least 100 Gbps.  No other algorithms have been
examined or modified for correct operation above 2^32 bps (some may
have existing computation resolution or overflow issues at rates below
that threshold).  pfctl(8) will now limit non-HFSC bandwidth
parameters to 2^32 - 1 before passing them to the kernel.

The extensions to the pf(4) ioctl interface have been made in a
backwards-compatible way by versioning affected data structures,
supporting all versions in the kernel, and implementing macros that
will cause existing code that consumes that interface to use version 0
without source modifications.  If version 0 consumers of the interface
are used against a new kernel that has had bandwidth parameters of
2^32 or greater configured by updated tools, such bandwidth parameters
will be reported as 2^32 - 1 bps by those old consumers.

All in-tree consumers of the pf(4) interface have been updated.  To
update out-of-tree consumers to the latest version of the interface,
define PFIOC_USE_LATEST ahead of any includes and use the code of
pfctl(8) as a guide for the ioctls of interest.

PR:	211730
Reviewed by:	jmallett, kp, loos
MFC after:	2 weeks
Relnotes:	yes
Sponsored by:	RG Nets
Differential Revision:	https://reviews.freebsd.org/D16782
2018-08-22 19:38:48 +00:00
..
altq.c Extended pf(4) ioctl interface and pfctl(8) to allow bandwidths of 2018-08-22 19:38:48 +00:00
dummynet.c Revert r327005 - SPDX tags for license similar to BSD-2-Clause. 2017-12-20 20:25:28 +00:00
ipfw2.c Restore the behaviour changed in r337536, when bad ipfw delete command 2018-08-10 14:10:22 +00:00
ipfw2.h Add "record-state", "set-limit" and "defer-action" rule options to ipfw. 2018-07-09 11:35:18 +00:00
ipfw.8 Restore the behaviour changed in r337536, when bad ipfw delete command 2018-08-10 14:10:22 +00:00
ipv6.c Fix indenting in ipv6.c file, use tabs instead of mixing tabs and spaces. 2018-04-12 20:05:26 +00:00
main.c Rework ipfw rules parsing and printing code. 2018-03-28 12:44:28 +00:00
Makefile Allow jail names (not just IDs) to be specified for: cpuset(1), ipfw(8), 2018-07-03 23:47:20 +00:00
Makefile.depend DIRDEPS_BUILD: Update dependencies. 2017-10-31 00:07:04 +00:00
nat64lsn.c Bring in some last changes in NAT64 implementation: 2018-05-09 11:59:24 +00:00
nat64stl.c Bring in some last changes in NAT64 implementation: 2018-05-09 11:59:24 +00:00
nat.c Revert r327005 - SPDX tags for license similar to BSD-2-Clause. 2017-12-20 20:25:28 +00:00
nptv6.c Make statistics nat64lsn, nat64stl an nptv6 output netstat-like: 2016-08-14 13:17:55 +00:00
tables.c ipfw(8): Fix endianness for Legacy and Ipv4 table hostname values 2018-03-08 17:23:18 +00:00