Home | History | Annotate | Download | only in altq
History log of /src/sys/altq/altq_red.c
RevisionDateAuthorComments
 1.36  08-Jan-2025  joe return: remove parenthesis from return statements
 1.35  05-Dec-2021  msaitoh branches: 1.35.6; 1.35.8;
s/failes/fails/ in comment.
 1.34  21-Sep-2021  christos Remove FreeBSD blocks that did not compile anyway, and use l->l_cred
consistently.
 1.33  03-Sep-2021  andvar fix typos in comments, mainly s/extention/extension/ and s/sufficent/sufficient/
 1.32  26-Dec-2019  msaitoh s/lenght/length/
 1.31  15-Nov-2018  maxv Remove the 't' argument from m_tag_find().
 1.30  20-Apr-2016  knakahara branches: 1.30.16; 1.30.18;
IFQ_ENQUEUE refactor (2/3) : eliminate pktattr argument from altq implemantation
 1.29  19-Nov-2011  tls branches: 1.29.8; 1.29.26;
First step of random number subsystem rework described in
<20111022023242.BA26F14A158@mail.netbsd.org>. This change includes
the following:

An initial cleanup and minor reorganization of the entropy pool
code in sys/dev/rnd.c and sys/dev/rndpool.c. Several bugs are
fixed. Some effort is made to accumulate entropy more quickly at
boot time.

A generic interface, "rndsink", is added, for stream generators to
request that they be re-keyed with good quality entropy from the pool
as soon as it is available.

The arc4random()/arc4randbytes() implementation in libkern is
adjusted to use the rndsink interface for rekeying, which helps
address the problem of low-quality keys at boot time.

An implementation of the FIPS 140-2 statistical tests for random
number generator quality is provided (libkern/rngtest.c). This
is based on Greg Rose's implementation from Qualcomm.

A new random stream generator, nist_ctr_drbg, is provided. It is
based on an implementation of the NIST SP800-90 CTR_DRBG by
Henric Jungheim. This generator users AES in a modified counter
mode to generate a backtracking-resistant random stream.

An abstraction layer, "cprng", is provided for in-kernel consumers
of randomness. The arc4random/arc4randbytes API is deprecated for
in-kernel use. It is replaced by "cprng_strong". The current
cprng_fast implementation wraps the existing arc4random
implementation. The current cprng_strong implementation wraps the
new CTR_DRBG implementation. Both interfaces are rekeyed from
the entropy pool automatically at intervals justifiable from best
current cryptographic practice.

In some quick tests, cprng_fast() is about the same speed as
the old arc4randbytes(), and cprng_strong() is about 20% faster
than rnd_extract_data(). Performance is expected to improve.

The AES code in src/crypto/rijndael is no longer an optional
kernel component, as it is required by cprng_strong, which is
not an optional kernel component.

The entropy pool output is subjected to the rngtest tests at
startup time; if it fails, the system will reboot. There is
approximately a 3/10000 chance of a false positive from these
tests. Entropy pool _input_ from hardware random numbers is
subjected to the rngtest tests at attach time, as well as the
FIPS continuous-output test, to detect bad or stuck hardware
RNGs; if any are detected, they are detached, but the system
continues to run.

A problem with rndctl(8) is fixed -- datastructures with
pointers in arrays are no longer passed to userspace (this
was not a security problem, but rather a major issue for
compat32). A new kernel will require a new rndctl.

The sysctl kern.arandom() and kern.urandom() nodes are hooked
up to the new generators, but the /dev/*random pseudodevices
are not, yet.

Manual pages for the new kernel interfaces are forthcoming.
 1.28  18-Jun-2008  yamt branches: 1.28.30;
merge yamt-pf42 branch.
(import newer pf from OpenBSD 4.2)

ok'ed by peter@. requested by core@
 1.27  20-Jan-2008  joerg branches: 1.27.6; 1.27.8; 1.27.10; 1.27.12; 1.27.14;
Now that __HAVE_TIMECOUNTER and __HAVE_GENERIC_TODR are invariants,
remove the conditionals and the code associated with the undef case.
 1.26  26-Mar-2007  hubertf branches: 1.26.10; 1.26.16; 1.26.22;
Remove duplicate #include <sys/kauth.h>
From: Slava Semushin <php-coder@altlinux.ru>
 1.25  04-Mar-2007  christos branches: 1.25.2; 1.25.4; 1.25.6;
Kill caddr_t; there will be some MI fallout, but it will be fixed shortly.
 1.24  16-Nov-2006  christos branches: 1.24.4;
__unused removal on arguments; approved by core.
 1.23  20-Oct-2006  elad Kill some KAUTH_GENERIC_ISSUSER.
 1.22  13-Oct-2006  peter Only compile in pf specific code when pf is configured.
Fixes kernel build when ALTQ is configured and pf not.
 1.21  12-Oct-2006  peter Merge the peter-altq branch.

(sync with KAME & add support for using ALTQ with pf(4)).
 1.20  12-Oct-2006  christos - sprinkle __unused on function decls.
- fix a couple of unused bugs
- no more -Wno-unused for i386
 1.19  21-Jul-2006  ad branches: 1.19.4; 1.19.6;
- Use the LWP cached credentials where sane.
- Minor cosmetic changes.
 1.18  07-Jun-2006  christos fix timecounter fallout
 1.17  15-May-2006  christos branches: 1.17.2;
kauth fallout
 1.16  14-May-2006  elad integrate kauth.
 1.15  23-Apr-2006  christos Complete the FREE -> free transition and add more NULL checks for malloc
returns. Although these cannot happen because M_WAITOK, the rest of the
code does them already, so this is good for consistency. From Mindaugas
 1.14  23-Apr-2006  christos Use malloc/free instead of MALLOC/FREE and M_ZERO instead of memset.
 1.13  24-Dec-2005  perry branches: 1.13.4; 1.13.6; 1.13.8; 1.13.10; 1.13.12;
Remove leading __ from __(const|inline|signed|volatile) -- it is obsolete.
 1.12  11-Dec-2005  christos merge ktrace-lwp.
 1.11  26-Feb-2005  perry branches: 1.11.4;
nuke trailing whitespace
 1.10  13-Feb-2004  wiz branches: 1.10.8; 1.10.10;
Spell length with h after t. Inspired by a commit by brad@openbsd.
 1.9  09-Nov-2003  christos - kill bzero/bcopy
- defopt stats and settings, removing their definitions from the files
- make code compile by eliminating multicharacter constants!?! and rearranging
variable declarations so they are defined before used!?!
- help gcc with uninitialized variables
 1.8  07-Oct-2003  mycroft There is NO reason to use arc4random() here, and it needlessly slows down the
forwarding path, so goodbye.
 1.7  05-Sep-2003  itojun use arc4random. sync w/ kame
 1.6  05-Mar-2002  itojun branches: 1.6.14;
bring in latest ALTQ from kjc. ALTQify some of the drivers.
 1.5  12-Nov-2001  lukem add RCSIDs
 1.4  05-Jul-2001  toshii branches: 1.4.2; 1.4.4;
Fix typo. s/extention/extension/
 1.3  13-Apr-2001  thorpej Remove the use of splimp() from the NetBSD kernel. splnet()
and only splnet() is allowed for the protection of data structures
used by network devices.
 1.2  14-Dec-2000  thorpej branches: 1.2.2; 1.2.4;
Add NetBSD RCS IDs.
 1.1  14-Dec-2000  thorpej branches: 1.1.1;
Initial revision
 1.1.1.1  14-Dec-2000  thorpej Import ALTQ from KAME.
 1.2.4.4  01-Apr-2002  nathanw Catch up to -current.
(CVS: It's not just a program. It's an adventure!)
 1.2.4.3  14-Nov-2001  nathanw Catch up to -current.
 1.2.4.2  24-Aug-2001  nathanw Catch up with -current.
 1.2.4.1  21-Jun-2001  nathanw Catch up to -current.
 1.2.2.3  21-Apr-2001  bouyer Sync with HEAD
 1.2.2.2  05-Jan-2001  bouyer Sync with HEAD
 1.2.2.1  14-Dec-2000  bouyer file altq_red.c was added on branch thorpej_scsipi on 2001-01-05 17:39:37 +0000
 1.4.4.1  10-Oct-2001  fvdl Convert all remaining devices.
 1.4.2.2  16-Mar-2002  jdolecek Catch up with -current.
 1.4.2.1  10-Jan-2002  thorpej Sync kqueue branch with -current.
 1.6.14.5  04-Mar-2005  skrll Sync with HEAD.

Hi Perry!
 1.6.14.4  21-Sep-2004  skrll Fix the sync with head I botched.
 1.6.14.3  18-Sep-2004  skrll Sync with HEAD.
 1.6.14.2  12-Aug-2004  skrll Adapt to new world order.
 1.6.14.1  03-Aug-2004  skrll Sync with HEAD
 1.10.10.1  19-Mar-2005  yamt sync with head. xen and whitespace. xen part is not finished.
 1.10.8.1  29-Apr-2005  kent sync with -current
 1.11.4.4  21-Jan-2008  yamt sync with head
 1.11.4.3  03-Sep-2007  yamt sync with head.
 1.11.4.2  30-Dec-2006  yamt sync with head.
 1.11.4.1  21-Jun-2006  yamt sync with head.
 1.13.12.4  25-Sep-2006  peter sync with head.
 1.13.12.3  09-Jun-2006  peter Merge 2006-05-24 NetBSD-current into the peter-altq branch.
 1.13.12.2  18-Mar-2006  peter Put some old ALTQ code into #ifdef ALTQ3_COMPAT.
 1.13.12.1  18-Mar-2006  peter Sync with KAME.
 1.13.10.3  11-May-2006  elad sync with head
 1.13.10.2  10-Mar-2006  elad generic_authorize() -> kauth_authorize_generic().
 1.13.10.1  08-Mar-2006  elad Adapt to kernel authorization KPI.
 1.13.8.3  11-Aug-2006  yamt sync with head
 1.13.8.2  26-Jun-2006  yamt sync with head.
 1.13.8.1  24-May-2006  yamt sync with head.
 1.13.6.1  01-Jun-2006  kardel Sync with head.
 1.13.4.1  09-Sep-2006  rpaulo sync with head
 1.17.2.1  19-Jun-2006  chap Sync with head.
 1.19.6.2  10-Dec-2006  yamt sync with head.
 1.19.6.1  22-Oct-2006  yamt sync with head
 1.19.4.1  18-Nov-2006  ad Sync with head.
 1.24.4.2  15-Apr-2007  yamt sync with head.
 1.24.4.1  12-Mar-2007  rmind Sync with HEAD.
 1.25.6.1  29-Mar-2007  reinoud Pullup to -current
 1.25.4.1  11-Jul-2007  mjf Sync with head.
 1.25.2.1  10-Apr-2007  ad Sync with head.
 1.26.22.1  23-Jan-2008  bouyer Sync with HEAD.
 1.26.16.1  18-Feb-2008  mjf Sync with HEAD.
 1.26.10.1  23-Mar-2008  matt sync with HEAD
 1.27.14.1  18-Jun-2008  simonb Sync with head.
 1.27.12.1  23-Jun-2008  wrstuden Sync w/ -current. 34 merge conflicts to follow.
 1.27.10.1  04-May-2009  yamt sync with head.
 1.27.8.1  24-Apr-2008  peter Add PACKET_TAG_ALTQ_QID and use it for pf/ALTQ. The ALTQ code compiles now.

ok yamt@
 1.27.6.1  29-Jun-2008  mjf Sync with HEAD.
 1.28.30.1  17-Apr-2012  yamt sync with head
 1.29.26.1  22-Apr-2016  skrll Sync with HEAD
 1.29.8.1  03-Dec-2017  jdolecek update from HEAD
 1.30.18.2  08-Apr-2020  martin Merge changes from current as of 20200406
 1.30.18.1  10-Jun-2019  christos Sync with HEAD
 1.30.16.1  26-Nov-2018  pgoyette Sync with HEAD, resolve a couple of conflicts
 1.35.8.1  02-Aug-2025  perseant Sync with HEAD
 1.35.6.1  11-Nov-2023  thorpej Mostly de-tangle ifnet::if_snd from ifaltq, in a way that's minimally-
invasive to the ALTQ code itself.

The point of this is to lay the groundwork for future changes to ifqueue,
which among other benefits, will also hide the ALTQ ABI from drivers.

RSS XML Feed