Some platforms have rules for retrieving the MAC address for an interface
beyond what properties exist. For example, a local address maybe be
present in a device tree property, but a system-wide property may indicate
that it should not be used (in favor of e.g. a singular system MAC addres -
LOOKIN' AT YOU, SUNW!).

So, the ether-get-mac-address device call is introduced to handle this
situation. Consult it before the standard properites, and if it succeeds,
use its result.

Garbage-collect the remaining vestiges of netisr.

Add a new link-aggregation pseudo interface named lagg(4)

- FreeBSD's lagg(4) based implementation
- MP-safe and MP-scalable

branches: 1.44.6; 1.44.8;
Implement address agnostic Neighbor Detection.

This is heavily based on IPv6 Neighbor Detection and allows per protocol
timers which also facilitate Neighor Unreachability Detection.

[ozaki-r] Changes to the kernel core for wireguard

Add support for MP-safe network interface statistics by maintaining them
in per-cpu storage, and collecting them for export in an if_data structure
when user-space wants them.

The new if_stat API is structured to make a gradual transition to the
new way in network drivers possible, and per-cpu stats are currently
disabled (thus there is no kernel ABI change). Once all drivers have
been converted, the old ABI will be removed, and per-cpu stats will be
enabled universally.

Remove FDDI support.

Remove Token Ring support.

Remove HIPPI support and the esh(4) driver that uses it. There have not
been any users of HIPPI for some time, and it is unlikely to be resurrected.

branches: 1.38.6;
Remove the network ATM code.

Retire EtherIP, we have L2TP instead.

branches: 1.36.2; 1.36.4;
Currently, it is not necessary to install rss_config.h. Pointed out by msaitoh@n.o.

Introduce very simple Receive Side Scaling (RSS) utility.

ok by msaitoh@n.o.

add ipsec(4) interface, which is used for route-based VPN.

man and ATF are added later, please see man for details.

reviewed by christos@n.o, joerg@n.o and ozaki-r@n.o, thanks.
https://mail-index.netbsd.org/tech-net/2017/12/18/msg006557.html

branches: 1.33.6;
add l2tp(4) L2TPv3 interface.

originally implemented by IIJ SEIL team.

branches: 1.32.14; 1.32.18; 1.32.22;
Add bpfjit and enable it for amd64.

Remove bpf_jit which was ported from FreeBSD recently.

It will soon be replaced with the new bpfjit kernel module.

branches: 1.30.2;
Export <net/bpf_jit.h> and add to the set lists.

branches: 1.29.8;
Import NPF - a packet filter. Some features:

- Designed to be fully MP-safe and highly efficient.

- Tables/IP sets (hash or red-black tree) for high performance lookups.

- Stateful filtering and Network Address Port Translation (NAPT).
Framework for application level gateways (ALGs).

- Packet inspection engine called n-code processor - inspired by BPF -
supporting generic RISC-like and specific CISC-like instructions for
common patterns (e.g. IPv4 address matching). See npf_ncode(9) manual.

- Convenient userland utility npfctl(8) with npf.conf(8).

NOTE: This is not yet a fully capable alternative to PF or IPFilter.
Further work (support for binat/rdr, return-rst/return-icmp, common ALGs,
state saving/restoring, logging, etc) is in progress.

Thanks a lot to Matt Thomas for various useful comments and code review.
Aye by: board@

Add MPLS support, proposed on tech-net@ a couple of days ago

Welcome to 5.99.33

branches: 1.27.2; 1.27.4;
No need to include bsd.subdir.mk as bsd.kinc.mk already includes it.

Install agr ioctl header and stop putting our hand under the sys skirt
in ifconfig.

branches: 1.25.14;
Back out previous. It broke the build.

Don't install sys/net/zlib.h.

branches: 1.23.2;
Add subroutines to support collating per-cpu-gathered network statistics.

branches: 1.22.36; 1.22.40; 1.22.42;
Install <net/if_pflog.h>.

Hook srt into the rest of the kernel build machinery, so it works to
just uncomment the pseudo-device line (which arguably should go into
other ports' GENERICs too, and at some point may).

OKed by perry.

branches: 1.20.2; 1.20.4;
New EtherIP driver based on tap(4) and gif(4) by Hans Rosenfeld.
Notable changes:
* Fixes PR 34268.
* Separates the code from gif(4) (which is more cleaner).
* Allows the usage of STP (Spanning Tree Protocol).
* Removed EtherIP implementation from gif(4)/tap(4).

Some input from Christos.

branches: 1.19.4; 1.19.6;
Do not instal net/if_pppvar.h, net/if_slvar.h and net/if_stripvar.h.
The former two are no longer necessary as slstats is no more
and pppstats now uses an ioctl instead of rummaging through kmem.
The latter has nothign interesting for the userland, but uses
struct bintime that I'm about to hide under #ifdef _KERNEL.

A bunch of remaining <net/if_*.h> headers is pretty useless to the
userland too, but ... someone else's yag to shave...

branches: 1.18.4; 1.18.8; 1.18.14; 1.18.16;
merge ktrace-lwp.

branches: 1.17.8; 1.17.10;
Install net/if_tap.h.

fix "includes" for pfvar.h

foundation for PF

Complete replacement of the old 802.11 layer with the new.

branches: 1.13.6;
Remove KDIR=, since SYS_INCLUDE=symlinks and KDIR are not supported any more.

Install net/ieee1394.h the same way we install all the other
link-layer-specific headers.

branches: 1.11.2;
Install if_bridgevar.h.

branches: 1.10.2;
Add an in-kernel PPPoE (ppp over ethernet, RFC 2516) implementation,
based on the existing net/if_spppsubr.c stuff.

While there are completely userland (bpf based) implementations available,
those have a vastly larger per packet overhead thus causing major CPU
overhead and higher latency. On an i386 base router, running a 486DX at 50MHz
my line (768kBit/s downstream) was limited to something (varying) between 10
and 20 kByte/s effective download rate. With this implementation I get full
bandwidth (~85kByte/s).

This is client side only. Arguably the right way to add full PPPoE support
(including server side) would be a variation of the ppp line discipline and
appropriate modifications to pppd. I promise every help I can give to anyone
doing that - but I needed this realy fast. Besids, on low memory NAT boxes
with typically a single PPPoE connection, this implementation is more
lightweight than a pppd based one, which nicely fits my needs.

branches: 1.9.2;
Put the BPF DLT_* constants into their own header file so that things
that reference them don't have to slurp in all of the BPF headers.

Define a new generic RAWAF type that is like DLT_RAW, but isn't specific
to IP (the macro takes an AF_* constant as an argument to generate the
actual type).

Install if_vlanvar.h.

branches: 1.7.4;
add net/if_stf.h and netinet/ip_encap.h (almost noone will include them though)

Add beginnings of ieee 802.11 generic stuff

branches: 1.5.2;
IPv6 kernel code, based on KAME/NetBSD 1.4, SNAP kit 19990628.
(Sorry for a big commit, I can't separate this into several pieces...)
Pls check sys/netinet6/TODO and sys/netinet6/IMPLEMENTATION for details.

- sys/kern: do not assume single mbuf, accept chained mbuf on passing
data from userland to kernel (or other way round).
- "midway" ATM card: ATM PVC pseudo device support, like those done in ALTQ
package (ftp://ftp.csl.sony.co.jp/pub/kjc/).
- sys/netinet/tcp*: IPv4/v6 dual stack tcp support.
- sys/netinet/{ip6,icmp6}.h, sys/net/pfkeyv2.h: IETF document assumes those
file to be there so we patch it up.
- sys/netinet: IPsec additions are here and there.
- sys/netinet6/*: most of IPv6 code sits here.
- sys/netkey: IPsec key management code
- dev/pci/pcidevs: regen

In my understanding no code here is subject to export control so it
should be safe.

Install if_sppp.h in include/net/

branches: 1.3.2;
Add if_token.h to INCS.

branches: 1.2.4;
Also install if_gre.h in /usr/include/net/

Rework the way kernel include files are installed. In the new method,
as with user-land programs, include files are installed by each directory
in the tree that has includes to install. (This allows more flexibility
as to what gets installed, makes 'partial installs' easier, and gives us
more options as to which machines' includes get installed at any given
time.) The old SYS_INCLUDES={symlinks,copies} behaviours are _both_
still supported, though at least one bug in the 'symlinks' case is
fixed by this change. Include files can't be build before installation,
so directories that have includes as targets (e.g. dev/pci) have to move
those targets into a different Makefile.