freebsd-nq/sys/netpfil/ipfw
Andrey V. Elsukov f7c4fdee1a Add "record-state", "set-limit" and "defer-action" rule options to ipfw.
"record-state" is similar to "keep-state", but it doesn't produce implicit
O_PROBE_STATE opcode in a rule. "set-limit" is like "limit", but it has the
same feature as "record-state", it is single opcode without implicit
O_PROBE_STATE opcode. "defer-action" is targeted to be used with dynamic
states. When rule with this opcode is matched, the rule's action will
not be executed, instead dynamic state will be created. And when this
state will be matched by "check-state", then rule action will be executed.
This allows create a more complicated rulesets.

Submitted by:	lev
MFC after:	1 month
Differential Revision:	https://reviews.freebsd.org/D1776
2018-07-09 11:35:18 +00:00
..
nat64 Bring in some last changes in NAT64 implementation: 2018-05-09 11:59:24 +00:00
nptv6 Do not acquire IPFW_WLOCK when a named object is created and destroyed. 2017-09-20 22:00:06 +00:00
pmod Fix IPv6 extension header parsing. The length field doesn't include the 2017-06-29 19:06:43 +00:00
test sys: general adoption of SPDX licensing ID tags. 2017-11-27 15:23:17 +00:00
dn_aqm_codel.c dummynet: Use strlcpy to appease static checkers 2017-04-13 17:47:44 +00:00
dn_aqm_codel.h Import Dummynet AQM version 0.2.1 (CoDel, FQ-CoDel, PIE and FQ-PIE). 2016-05-26 21:40:13 +00:00
dn_aqm_pie.c Fix the queue delay estimation in PIE/FQ-PIE when the timestamp 2017-05-19 08:38:03 +00:00
dn_aqm_pie.h Change several constants used by the PIE algorithm from unsigned to signed. 2017-03-18 23:00:13 +00:00
dn_aqm.h Correct a typo in a comment. 2016-05-26 22:03:28 +00:00
dn_heap.c netpfil/ipfw: Make some use of mallocarray(9). 2018-01-11 15:29:29 +00:00
dn_heap.h sys: general adoption of SPDX licensing ID tags. 2017-11-27 15:23:17 +00:00
dn_sched_fifo.c sys: general adoption of SPDX licensing ID tags. 2017-11-27 15:23:17 +00:00
dn_sched_fq_codel_helper.h Import Dummynet AQM version 0.2.1 (CoDel, FQ-CoDel, PIE and FQ-PIE). 2016-05-26 21:40:13 +00:00
dn_sched_fq_codel.c Implement 'domainset', a cpuset based NUMA policy mechanism. This allows 2018-01-12 22:48:23 +00:00
dn_sched_fq_codel.h Import Dummynet AQM version 0.2.1 (CoDel, FQ-CoDel, PIE and FQ-PIE). 2016-05-26 21:40:13 +00:00
dn_sched_fq_pie.c netpfil/ipfw: Make some use of mallocarray(9). 2018-01-11 15:29:29 +00:00
dn_sched_prio.c sys: general adoption of SPDX licensing ID tags. 2017-11-27 15:23:17 +00:00
dn_sched_qfq.c sys: general adoption of SPDX licensing ID tags. 2017-11-27 15:23:17 +00:00
dn_sched_rr.c sys: general adoption of SPDX licensing ID tags. 2017-11-27 15:23:17 +00:00
dn_sched_wf2q.c sys: general adoption of SPDX licensing ID tags. 2017-11-27 15:23:17 +00:00
dn_sched.h sys: general adoption of SPDX licensing ID tags. 2017-11-27 15:23:17 +00:00
dummynet.txt
ip_dn_glue.c sys: general adoption of SPDX licensing ID tags. 2017-11-27 15:23:17 +00:00
ip_dn_io.c sys: general adoption of SPDX licensing ID tags. 2017-11-27 15:23:17 +00:00
ip_dn_private.h sys: general adoption of SPDX licensing ID tags. 2017-11-27 15:23:17 +00:00
ip_dummynet.c sys: general adoption of SPDX licensing ID tags. 2017-11-27 15:23:17 +00:00
ip_fw2.c Add "record-state", "set-limit" and "defer-action" rule options to ipfw. 2018-07-09 11:35:18 +00:00
ip_fw_bpf.c Move logging via BPF support into separate file. 2016-08-13 15:41:04 +00:00
ip_fw_dynamic.c Create a new macro for static DPCPU data. 2018-07-05 17:13:37 +00:00
ip_fw_eaction.c Add O_EXTERNAL_DATA opcode support. 2017-04-03 02:44:40 +00:00
ip_fw_iface.c Remove "IPFW static rules" rmlock. 2017-04-03 13:35:04 +00:00
ip_fw_log.c Add UDPLite support to ipfw(4). 2018-01-19 12:50:03 +00:00
ip_fw_nat.c ifnet: Replace if_addr_lock rwlock with epoch + mutex 2018-05-18 20:13:34 +00:00
ip_fw_pfil.c sys: general adoption of SPDX licensing ID tags. 2017-11-27 15:23:17 +00:00
ip_fw_private.h Rework ipfw dynamic states implementation to be lockless on fast path. 2018-02-07 18:59:54 +00:00
ip_fw_sockopt.c Add "record-state", "set-limit" and "defer-action" rule options to ipfw. 2018-07-09 11:35:18 +00:00
ip_fw_table_algo.c Switch RIB and RADIX_NODE_HEAD lock from rwlock(9) to rmlock(9). 2018-06-16 08:26:23 +00:00
ip_fw_table_value.c Remove "IPFW static rules" rmlock. 2017-04-03 13:35:04 +00:00
ip_fw_table.c Fix ipfw table creation when net.inet.ip.fw.tables_sets = 0 and non zero set 2018-04-11 11:12:20 +00:00
ip_fw_table.h