5df13d37b2
have already done this, so I have styled the patch on their work:
1) introduce a ip_newid() static inline function that checks
the sysctl and then decides if it should return a sequential
or random IP ID.
2) named the sysctl net.inet.ip.random_id
3) IPv6 flow IDs and fragment IDs are now always random.
Flow IDs and frag IDs are significantly less common in the
IPv6 world (ie. rarely generated per-packet), so there should
be smaller performance concerns.
The sysctl defaults to 0 (sequential IP IDs).
Reviewed by: andre, silby, mlaier, ume
Based on: NetBSD
MFC after: 2 months
|
||
|---|---|---|
| .. | ||
| ah_var.h | ||
| ah.h | ||
| esp_var.h | ||
| esp.h | ||
| ipcomp_var.h | ||
| ipcomp.h | ||
| ipip_var.h | ||
| ipsec6.h | ||
| ipsec_input.c | ||
| ipsec_mbuf.c | ||
| ipsec_osdep.h | ||
| ipsec_output.c | ||
| ipsec.c | ||
| ipsec.h | ||
| key_debug.c | ||
| key_debug.h | ||
| key_var.h | ||
| key.c | ||
| key.h | ||
| keydb.h | ||
| keysock.c | ||
| keysock.h | ||
| xform_ah.c | ||
| xform_esp.c | ||
| xform_ipcomp.c | ||
| xform_ipip.c | ||
| xform_tcp.c | ||
| xform.h | ||