freebsd-skq/share/man
Gleb Smirnoff b252313f0b New pfil(9) KPI together with newborn pfil API and control utility.
The KPI have been reviewed and cleansed of features that were planned
back 20 years ago and never implemented.  The pfil(9) internals have
been made opaque to protocols with only returned types and function
declarations exposed. The KPI is made more strict, but at the same time
more extensible, as kernel uses same command structures that userland
ioctl uses.

In nutshell [KA]PI is about declaring filtering points, declaring
filters and linking and unlinking them together.

New [KA]PI makes it possible to reconfigure pfil(9) configuration:
change order of hooks, rehook filter from one filtering point to a
different one, disconnect a hook on output leaving it on input only,
prepend/append a filter to existing list of filters.

Now it possible for a single packet filter to provide multiple rulesets
that may be linked to different points. Think of per-interface ACLs in
Cisco or Juniper. None of existing packet filters yet support that,
however limited usage is already possible, e.g. default ruleset can
be moved to single interface, as soon as interface would pride their
filtering points.

Another future feature is possiblity to create pfil heads, that provide
not an mbuf pointer but just a memory pointer with length. That would
allow filtering at very early stages of a packet lifecycle, e.g. when
packet has just been received by a NIC and no mbuf was yet allocated.

Differential Revision:	https://reviews.freebsd.org/D18951
2019-01-31 23:01:03 +00:00
..
man1 share: normalize paths using SRCTOP-relative paths or :H when possible 2017-03-04 11:26:40 +00:00
man3 Typo. 2019-01-02 16:01:54 +00:00
man4 Make iflib a loadable module. 2019-01-31 19:05:56 +00:00
man5 regen src.conf.5 after r343606 2019-01-31 15:50:11 +00:00
man6 Update intro(6) - remove hint that doesn't work, add explicit list 2017-11-27 12:39:35 +00:00
man7 ports.7: Do not mention deprecated WITH_SSP_PORTS and WITH_GHOSTSCRIPT_VER 2019-01-08 09:41:52 +00:00
man8 rc.subr: Provide rc_service variable for service scripts 2019-01-05 21:23:25 +00:00
man9 New pfil(9) KPI together with newborn pfil API and control utility. 2019-01-31 23:01:03 +00:00
Makefile