| /net/xfrm/ |
| D | xfrm_sysctl.c | 9 net->xfrm.sysctl_aevent_etime = XFRM_AE_ETIME; in __xfrm_sysctl_init()
10 net->xfrm.sysctl_aevent_rseqth = XFRM_AE_SEQT_SIZE; in __xfrm_sysctl_init()
11 net->xfrm.sysctl_larval_drop = 1; in __xfrm_sysctl_init()
12 net->xfrm.sysctl_acq_expires = 30; in __xfrm_sysctl_init()
53 table[0].data = &net->xfrm.sysctl_aevent_etime; in xfrm_sysctl_init()
54 table[1].data = &net->xfrm.sysctl_aevent_rseqth; in xfrm_sysctl_init()
55 table[2].data = &net->xfrm.sysctl_larval_drop; in xfrm_sysctl_init()
56 table[3].data = &net->xfrm.sysctl_acq_expires; in xfrm_sysctl_init()
62 net->xfrm.sysctl_hdr = register_net_sysctl(net, "net/core", table); in xfrm_sysctl_init()
63 if (!net->xfrm.sysctl_hdr) in xfrm_sysctl_init()
[all …]
|
| D | xfrm_policy.c | 463 return __idx_hash(index, net->xfrm.policy_idx_hmask); in idx_hash()
473 *dbits = net->xfrm.policy_bydst[dir].dbits4; in __get_hash_thresh()
474 *sbits = net->xfrm.policy_bydst[dir].sbits4; in __get_hash_thresh()
478 *dbits = net->xfrm.policy_bydst[dir].dbits6; in __get_hash_thresh()
479 *sbits = net->xfrm.policy_bydst[dir].sbits6; in __get_hash_thresh()
492 unsigned int hmask = net->xfrm.policy_bydst[dir].hmask; in policy_hash_bysel()
503 return rcu_dereference_check(net->xfrm.policy_bydst[dir].table, in policy_hash_bysel()
504 lockdep_is_held(&net->xfrm.xfrm_policy_lock)) + hash; in policy_hash_bysel()
512 unsigned int hmask = net->xfrm.policy_bydst[dir].hmask; in policy_hash_direct()
520 return rcu_dereference_check(net->xfrm.policy_bydst[dir].table, in policy_hash_direct()
[all …]
|
| D | xfrm_state.c | 35 rcu_dereference_protected((table), lockdep_is_held(&(net)->xfrm.xfrm_state_lock))
63 return __xfrm_dst_hash(daddr, saddr, reqid, family, net->xfrm.state_hmask); in xfrm_dst_hash()
71 return __xfrm_src_hash(daddr, saddr, family, net->xfrm.state_hmask); in xfrm_src_hash()
78 return __xfrm_spi_hash(daddr, spi, proto, family, net->xfrm.state_hmask); in xfrm_spi_hash()
119 struct net *net = container_of(work, struct net, xfrm.state_hash_work); in xfrm_hash_resize()
125 nsize = xfrm_hash_new_size(net->xfrm.state_hmask); in xfrm_hash_resize()
141 spin_lock_bh(&net->xfrm.xfrm_state_lock); in xfrm_hash_resize()
142 write_seqcount_begin(&net->xfrm.xfrm_state_hash_generation); in xfrm_hash_resize()
145 odst = xfrm_state_deref_prot(net->xfrm.state_bydst, net); in xfrm_hash_resize()
146 for (i = net->xfrm.state_hmask; i >= 0; i--) in xfrm_hash_resize()
[all …]
|
| D | xfrm_user.c | 643 x->replay_maxdiff = net->xfrm.sysctl_aevent_rseqth; in xfrm_state_construct()
645 x->replay_maxage = (net->xfrm.sysctl_aevent_etime*HZ)/XFRM_AE_ETH_M; in xfrm_state_construct()
1106 struct sock *nlsk = rcu_dereference(net->xfrm.nlsk); in xfrm_nlmsg_multicast()
1166 lseq = read_seqbegin(&net->xfrm.policy_hthresh.lock); in build_spdinfo()
1168 spt4.lbits = net->xfrm.policy_hthresh.lbits4; in build_spdinfo()
1169 spt4.rbits = net->xfrm.policy_hthresh.rbits4; in build_spdinfo()
1170 spt6.lbits = net->xfrm.policy_hthresh.lbits6; in build_spdinfo()
1171 spt6.rbits = net->xfrm.policy_hthresh.rbits6; in build_spdinfo()
1172 } while (read_seqretry(&net->xfrm.policy_hthresh.lock, lseq)); in build_spdinfo()
1218 write_seqlock(&net->xfrm.policy_hthresh.lock); in xfrm_set_spdinfo()
[all …]
|
| D | xfrm_output.c | 414 struct xfrm_state *x = dst->xfrm; in xfrm_output_one()
491 x = dst->xfrm; in xfrm_output_one()
506 struct net *net = xs_net(skb_dst(skb)->xfrm); in xfrm_output_resume()
515 if (!skb_dst(skb)->xfrm) in xfrm_output_resume()
569 struct xfrm_state *x = skb_dst(skb)->xfrm; in xfrm_output()
|
| D | xfrm_device.c | 310 (!xdst->child->xfrm)) { in xfrm_dev_offload_ok()
|
| D | xfrm_interface_core.c | 328 x = dst->xfrm; in xfrmi_xmit2()
|
| /net/ipv6/ |
| D | xfrm6_policy.c | 149 } while (xdst->u.dst.xfrm); in xfrm6_dst_ifdown()
190 .data = &init_net.xfrm.xfrm6_dst_ops.gc_thresh,
209 table[0].data = &net->xfrm.xfrm6_dst_ops.gc_thresh; in xfrm6_net_sysctl_init()
253 memcpy(&net->xfrm.xfrm6_dst_ops, &xfrm6_dst_ops_template, in xfrm6_net_init()
255 ret = dst_entries_init(&net->xfrm.xfrm6_dst_ops); in xfrm6_net_init()
261 dst_entries_destroy(&net->xfrm.xfrm6_dst_ops); in xfrm6_net_init()
269 dst_entries_destroy(&net->xfrm.xfrm6_dst_ops); in xfrm6_net_exit()
|
| D | xfrm6_output.c | 71 struct xfrm_state *x = dst->xfrm; in __xfrm6_output()
|
| D | ah6.c | 43 struct xfrm_skb_cb xfrm; member
293 struct xfrm_state *x = skb_dst(skb)->xfrm; in ah6_output_done()
|
| D | esp6.c | 43 struct xfrm_skb_cb xfrm; member
236 struct xfrm_state *x = dst->xfrm; in esp_output_tcp_encap_cb()
293 x = skb_dst(skb)->xfrm; in esp_output_done()
|
| D | Kconfig | 161 encapsulating protocol. This can be used with xfrm mode tunnel to give
|
| D | ip6_vti.c | 497 x = dst->xfrm; in vti6_xmit()
|
| /net/ipv4/ |
| D | xfrm4_policy.c | 163 .data = &init_net.xfrm.xfrm4_dst_ops.gc_thresh,
182 table[0].data = &net->xfrm.xfrm4_dst_ops.gc_thresh; in xfrm4_net_sysctl_init()
226 memcpy(&net->xfrm.xfrm4_dst_ops, &xfrm4_dst_ops_template, in xfrm4_net_init()
228 ret = dst_entries_init(&net->xfrm.xfrm4_dst_ops); in xfrm4_net_init()
234 dst_entries_destroy(&net->xfrm.xfrm4_dst_ops); in xfrm4_net_init()
242 dst_entries_destroy(&net->xfrm.xfrm4_dst_ops); in xfrm4_net_exit()
|
| D | xfrm4_output.c | 20 struct xfrm_state *x = skb_dst(skb)->xfrm; in __xfrm4_output()
|
| D | ah4.c | 19 struct xfrm_skb_cb xfrm; member
125 struct xfrm_state *x = skb_dst(skb)->xfrm; in ah_output_done()
|
| D | esp4.c | 27 struct xfrm_skb_cb xfrm; member
220 struct xfrm_state *x = dst->xfrm; in esp_output_tcp_encap_cb()
260 x = skb_dst(skb)->xfrm; in esp_output_done()
|
| D | ip_vti.c | 223 if (!vti_state_check(dst->xfrm, parms->iph.daddr, parms->iph.saddr)) { in vti_xmit()
|
| /net/netfilter/ |
| D | xt_policy.c | 90 if (dst->xfrm == NULL) in match_policy_out()
93 for (i = 0; dst && dst->xfrm; in match_policy_out()
100 if (match_xfrm_state(dst->xfrm, e, family)) { in match_policy_out()
|
| D | nft_xfrm.c | 180 for (i = 0; dst && dst->xfrm; in nft_xfrm_get_eval_out()
185 nft_xfrm_state_get_key(priv, regs, dst->xfrm); in nft_xfrm_get_eval_out()
|
| D | nft_rt.c | 92 nft_reg_store8(dest, !!dst->xfrm); in nft_rt_get_eval()
|
| D | nf_nat_core.c | 163 if (dst->xfrm) in nf_xfrm_me_harder()
|
| /net/core/ |
| D | dst.c | 58 dst->xfrm = NULL; in dst_init()
110 if (dst->xfrm) { in dst_destroy()
|
| /net/ |
| D | Makefile | 20 obj-$(CONFIG_XFRM) += xfrm/
|
| D | Kconfig | 66 source "net/xfrm/Kconfig"
|