d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
772759420f
freebsd-nq/sys
History
Luigi Rizzo 772759420f Implement probabilistic rule match in ipfw. Each rule can be associated 
with a match probability to achieve non-deterministic behaviour of
the firewall. This can be extremely useful for testing purposes
such as simulating random packet drop without having to use dummynet
(which already does the same thing), and simulating multipath effects
and the associated out-of-order delivery (this time in conjunction
with dummynet).

The overhead on normal rules is just one comparison with 0.

Since it would have been trivial to implement this by just adding
a field to the ip_fw structure, I decided to do it in a
backward-compatible way (i.e. struct ip_fw is unchanged, and as a
consequence you don't need to recompile ipfw if you don't want to
use this feature), since this was also useful for -STABLE.

When, at some point, someone decides to change struct ip_fw, please
add a length field and a version number at the beginning, so userland
apps can keep working even if they are out of sync with the kernel.
1999-08-11 15:34:47 +00:00
..
alpha Do not map {s|g}etrlimit onto FreeBSD syscalls. The arguments don't match. 1999-08-11 13:34:31 +00:00
amd64 Hopefully fix the previous commit, it caused *all* bridges to be detected 1999-08-10 09:22:21 +00:00
boot Convert the Winbond driver to newbus and have it compiled as a module. 1999-08-10 21:09:12 +00:00
cam Merge the cons.c and cons.h to the best of my ability. alpha may or 1999-08-09 10:35:05 +00:00
coda Decommision miscfs/specfs/specdev.h. Most of it goes into <sys/conf.h>, 1999-08-08 18:43:05 +00:00
compat Do not map {s|g}etrlimit onto FreeBSD syscalls. The arguments don't match. 1999-08-11 13:34:31 +00:00
compile
conf Reserve bdev/cdev entries for i2o driver. 1999-08-11 05:28:06 +00:00
contrib Decommision miscfs/specfs/specdev.h. Most of it goes into <sys/conf.h>, 1999-08-08 18:43:05 +00:00
ddb Merge the cons.c and cons.h to the best of my ability. alpha may or 1999-08-09 10:35:05 +00:00
dev Support DMA on ATAPI devices (finally). 1999-08-10 21:59:58 +00:00
fs Decommision miscfs/specfs/specdev.h. Most of it goes into <sys/conf.h>, 1999-08-08 18:43:05 +00:00
geom Use the vn_todev() function, rather than VOP_GETATTR 1999-07-18 14:31:01 +00:00
gnu Decommision miscfs/specfs/specdev.h. Most of it goes into <sys/conf.h>, 1999-08-08 18:43:05 +00:00
i4b Avoid symbol clash in LINT. 1999-08-08 18:17:40 +00:00
i386 Do not map {s|g}etrlimit onto FreeBSD syscalls. The arguments don't match. 1999-08-11 13:34:31 +00:00
isa make alpha compile again. 1999-08-09 11:02:45 +00:00
isofs/cd9660 Decommision miscfs/specfs/specdev.h. Most of it goes into <sys/conf.h>, 1999-08-08 18:43:05 +00:00
kern When doing a dump, if ENODEV is returned explain what happened to the user, 1999-08-11 14:02:20 +00:00
libkern Use the latest version of these files from OpenBSD. 1999-08-10 05:58:58 +00:00
miscfs Decommision miscfs/specfs/specdev.h. Most of it goes into <sys/conf.h>, 1999-08-08 18:43:05 +00:00
modules Convert the Winbond driver to newbus and have it compiled as a module. 1999-08-10 21:09:12 +00:00
msdosfs Decommision miscfs/specfs/specdev.h. Most of it goes into <sys/conf.h>, 1999-08-08 18:43:05 +00:00
net Back out redundant check, and remove the MAXMTU comparison as it's 1999-08-06 16:52:04 +00:00
netatalk Change suser_xxx() to suser() where it applies. 1999-04-27 12:21:16 +00:00
netatm Allow configuration of up to 256 network interfaces per physical interface - 1999-05-10 23:02:29 +00:00
netinet Implement probabilistic rule match in ipfw. Each rule can be associated 1999-08-11 15:34:47 +00:00
netipx Suser() simplification: 1999-04-27 11:18:52 +00:00
netkey #ifdef out unused function key_freetables. 1999-01-12 12:38:31 +00:00
netnatm Examine all occurrences of sprintf(), strcat(), and str[n]cpy() 1998-12-04 22:54:57 +00:00
netns
nfs Decommision miscfs/specfs/specdev.h. Most of it goes into <sys/conf.h>, 1999-08-08 18:43:05 +00:00
nfsclient Decommision miscfs/specfs/specdev.h. Most of it goes into <sys/conf.h>, 1999-08-08 18:43:05 +00:00
nfsserver Decommision miscfs/specfs/specdev.h. Most of it goes into <sys/conf.h>, 1999-08-08 18:43:05 +00:00
ntfs Decommision miscfs/specfs/specdev.h. Most of it goes into <sys/conf.h>, 1999-08-08 18:43:05 +00:00
pc98 Cosmetic changes in PC98 functions: 1999-08-10 13:24:18 +00:00
pccard o Add additional printfs for error cases when we can't attach the device. 1999-08-01 18:12:51 +00:00
pci Small tweak: remember to free the tx ring data (which is malloc()ed) if 1999-08-10 21:12:11 +00:00
posix4 Well folks, this is it - The second stage of the removal for build support 1999-04-17 08:36:07 +00:00
powerpc Sync with alc's revision 1.125 of i386/i386/vm_machdep.c. This 1999-08-05 23:38:13 +00:00
rpc
svr4 Previous commit also removed some 'const' qualifiers on args for 1999-07-30 13:44:43 +00:00
sys mfs: DOC2K label type for legacy labels 1999-08-11 03:02:05 +00:00
tools Add a vnode argument to VOP_BWRITE to get rid of the last vnode 1999-06-16 23:27:55 +00:00
ufs Decommision miscfs/specfs/specdev.h. Most of it goes into <sys/conf.h>, 1999-08-08 18:43:05 +00:00
vm contigmalloc1: 1999-08-11 05:12:00 +00:00
Makefile Use MACHINE_ARCH instead of MACHINE to check x86 architecture. 1999-06-03 10:38:07 +00:00