opnsense-src/sys/netipsec
Konstantin Belousov 0ff2d00d2a ipsec: allow it to work with unmapped mbufs
Only map mbuf when a policy is looked up and indicates that IPSEC needs
to transform the packet.  If IPSEC is inline offloaded, it is up to the
interface driver to request remap if needed.

Fetch the IP header using m_copydata() instead of using mtod() to select
policy/SA.

Reviewed by:	markj
Sponsored by:	NVidia networking
Differential revision:	https://reviews.freebsd.org/D48265
2025-01-13 21:29:32 +02:00
..
ah.h sys: Remove $FreeBSD$: one-line .c comment pattern 2023-08-16 11:54:24 -06:00
ah_var.h netipsec: add probe points for the ipsec/esp/ah/ipcomp counters 2024-08-28 12:02:45 +02:00
esp.h sys: Remove $FreeBSD$: one-line .c comment pattern 2023-08-16 11:54:24 -06:00
esp_var.h netipsec: add probe points for the ipsec/esp/ah/ipcomp counters 2024-08-28 12:02:45 +02:00
ipcomp.h sys: Remove $FreeBSD$: one-line .c comment pattern 2023-08-16 11:54:24 -06:00
ipcomp_var.h netipsec: add probe points for the ipsec/esp/ah/ipcomp counters 2024-08-28 12:02:45 +02:00
ipsec.c ipsec: allow it to work with unmapped mbufs 2025-01-13 21:29:32 +02:00
ipsec.h ipsec: allow it to work with unmapped mbufs 2025-01-13 21:29:32 +02:00
ipsec6.h ipsec_output(): add mtu argument 2024-07-12 06:29:31 +03:00
ipsec_input.c ipsec_offload: kernel infrastructure 2024-07-12 07:27:58 +03:00
ipsec_mbuf.c sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
ipsec_mod.c Add UDP encapsulation of ESP in IPv6 2024-01-16 20:44:34 +00:00
ipsec_offload.c net: Include private header in more needed places 2024-11-13 14:30:59 -05:00
ipsec_offload.h ipsec_offload: add ipsec_accel_drv_sa_lifetime_fetch() 2024-08-20 15:42:13 +03:00
ipsec_output.c ipsec: allow it to work with unmapped mbufs 2025-01-13 21:29:32 +02:00
ipsec_pcb.c ipsec_offload: kernel infrastructure 2024-07-12 07:27:58 +03:00
ipsec_support.h ipsec: allow it to work with unmapped mbufs 2025-01-13 21:29:32 +02:00
key.c netipsec: Pass the right mbuf up 2025-01-06 23:20:18 +00:00
key.h ipsec_offload: kernel infrastructure 2024-07-12 07:27:58 +03:00
key_debug.c pfkey: Fix some checks in kdebug_sadb() 2024-12-04 16:22:50 +00:00
key_debug.h sys: Remove $FreeBSD$: one-line .c comment pattern 2023-08-16 11:54:24 -06:00
key_var.h sys: Remove $FreeBSD$: one-line .c comment pattern 2023-08-16 11:54:24 -06:00
keydb.h ipsec_offload: kernel infrastructure 2024-07-12 07:27:58 +03:00
keysock.c sockets: provide correct pr_shutdown for keysock and SDP 2024-01-16 12:02:59 -08:00
keysock.h sys: Remove $FreeBSD$: one-line .c comment pattern 2023-08-16 11:54:24 -06:00
subr_ipsec.c ipsec: allow it to work with unmapped mbufs 2025-01-13 21:29:32 +02:00
udpencap.c Fix KASSERT in 80044c78 causing build failures 2024-01-16 23:15:00 +00:00
xform.h sys: Remove $FreeBSD$: one-line .c comment pattern 2023-08-16 11:54:24 -06:00
xform_ah.c netipsec: add probe points for the ipsec/esp/ah/ipcomp counters 2024-08-28 12:02:45 +02:00
xform_esp.c netipsec: add probe points for the ipsec/esp/ah/ipcomp counters 2024-08-28 12:02:45 +02:00
xform_ipcomp.c netipsec: add probe points for the ipsec/esp/ah/ipcomp counters 2024-08-28 12:02:45 +02:00
xform_tcp.c ipsec: allow it to work with unmapped mbufs 2025-01-13 21:29:32 +02:00