Alexander V. Chernikov 2e089d5c04 Make ipfw dynamic states operations SMP-ready. ...

* Global IPFW_DYN_LOCK() is changed to per-bucket mutex.
* State expiration is done in ipfw_tick every second.
* No expiration is done on forwarding path.
* hash table resize is done automatically and does not flush all states.
* Dynamic UMA zone is now allocated per each VNET
* State limiting is now done via UMA(9) api.

Discussed with:	ipfw
MFC after:	3 weeks
Sponsored by:	Yandex LLC

2012-11-30 16:33:22 +00:00

..

ipfw

Make ipfw dynamic states operations SMP-ready.

2012-11-30 16:33:22 +00:00

pf

Merge rev. 1.125 from OpenBSD:

2012-11-07 07:35:05 +00:00