en Copyright 2015 Java http://172.16.0.5:8080/history/freebsd-13.1/sbin/ipfw/Makefile#34055dac ipfw: Introduce dnctlIntroduce a link to the ipfw command, dnctl, for dummynet configuration.dnctl only handles dummynet configuration, and is part of the effort tosupport dummynet in pf./sbin/ipfw continues to accept pipe, queue and sched commands, but these cannow also be issued via the new dnctl command.Reviewed by: donnerMFC after: 2 weeksSponsored by: Rubicon Communications, LLC ("Netgate")Differential Revision: https://reviews.freebsd.org/D30465(cherry picked from commit 0b95680e077b7ef5bc6930c7c0f1a41106251d5d) List of files: /freebsd-13.1/sbin/ipfw/Makefile Tue, 25 May 2021 14:54:32 +0000 Kristof Provost <kp@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/sbin/ipfw/Makefile#56707bee ipfw(8): Fix most warnings with the default WARNS level.- Add missing const and static qualifiers.- Avoid shadowing the global "co" by renaming it to "g_co".- Avoid mixing signedness in loop bound checks.- Leave -Wcast-align warnings disabled for now.Reviewed by: ae, melifaroMFC after: 2 weeksDifferential Revision: https://reviews.freebsd.org/D25456 List of files: /freebsd-13.1/sbin/ipfw/Makefile Mon, 13 Jul 2020 17:51:04 +0000 Mark Johnston <markj@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/sbin/ipfw/Makefile#5c04f73e Add NAT64 CLAT implementation as defined in RFC6877.CLAT is customer-side translator that algorithmically translates 1:1private IPv4 addresses to global IPv6 addresses, and vice versa.It is implemented as part of ipfw_nat64 kernel module. When moduleis loaded or compiled into the kernel, it registers "nat64clat" externalaction. External action named instance can be created using `create`command and then used in ipfw rules. The create command accepts twoIPv6 prefixes `plat_prefix` and `clat_prefix`. If plat_prefix is ommitted,IPv6 NAT64 Well-Known prefix 64:ff9b::/96 will be used. # ipfw nat64clat CLAT create clat_prefix SRC_PFX plat_prefix DST_PFX # ipfw add nat64clat CLAT ip4 from IPv4_PFX to any out # ipfw add nat64clat CLAT ip6 from DST_PFX to SRC_PFX inObtained from: Yandex LLCSubmitted by: Boris N. LytochkinMFC after: 1 monthRelnotes: yesSponsored by: Yandex LLC List of files: /freebsd-13.1/sbin/ipfw/Makefile Mon, 18 Mar 2019 11:44:53 +0000 Andrey V. Elsukov <ae@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/sbin/ipfw/Makefile#de68a320 Allow jail names (not just IDs) to be specified for: cpuset(1), ipfw(8), sockstat(1), ugidfw(8)These are the last of the jail-aware userland utilities that didn't work with names.PR: 229266MFC after: 3 daysDifferential Revision: D16047 List of files: /freebsd-13.1/sbin/ipfw/Makefile Tue, 03 Jul 2018 23:47:20 +0000 Jamie Gritton <jamie@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/sbin/ipfw/Makefile#d8caf56e Add ipfw_nat64 module that implements stateless and stateful NAT64.The module works together with ipfw(4) and implemented as its externalaction module.Stateless NAT64 registers external action with name nat64stl. Thiskeyword should be used to create NAT64 instance and to address thisinstance in rules. Stateless NAT64 uses two lookup tables with mappedIPv4->IPv6 and IPv6->IPv4 addresses to perform translation.A configuration of instance should looks like this: 1. Create lookup tables: # ipfw table T46 create type addr valtype ipv6 # ipfw table T64 create type addr valtype ipv4 2. Fill T46 and T64 tables. 3. Add rule to allow neighbor solicitation and advertisement: # ipfw add allow icmp6 from any to any icmp6types 135,136 4. Create NAT64 instance: # ipfw nat64stl NAT create table4 T46 table6 T64 5. Add rules that matches the traffic: # ipfw add nat64stl NAT ip from any to table(T46) # ipfw add nat64stl NAT ip from table(T64) to 64:ff9b::/96 6. Configure DNS64 for IPv6 clients and add route to 64:ff9b::/96 via NAT64 host.Stateful NAT64 registers external action with name nat64lsn. The onlyone option required to create nat64lsn instance - prefix4. It definesthe pool of IPv4 addresses used for translation.A configuration of instance should looks like this: 1. Add rule to allow neighbor solicitation and advertisement: # ipfw add allow icmp6 from any to any icmp6types 135,136 2. Create NAT64 instance: # ipfw nat64lsn NAT create prefix4 A.B.C.D/28 3. Add rules that matches the traffic: # ipfw add nat64lsn NAT ip from any to A.B.C.D/28 # ipfw add nat64lsn NAT ip6 from any to 64:ff9b::/96 4. Configure DNS64 for IPv6 clients and add route to 64:ff9b::/96 via NAT64 host.Obtained from: Yandex LLCRelnotes: yesSponsored by: Yandex LLCDifferential Revision: https://reviews.freebsd.org/D6434 List of files: /freebsd-13.1/sbin/ipfw/Makefile Sat, 13 Aug 2016 16:09:49 +0000 Andrey V. Elsukov <ae@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/sbin/ipfw/Makefile#b867e84e Add ipfw_nptv6 module that implements Network Prefix Translation for IPv6as defined in RFC 6296. The module works together with ipfw(4) andimplemented as its external action module. When it is loaded, it registersas eaction and can be used in rules. The usage pattern is similar toipfw_nat(4). All matched by rule traffic goes to the NPT module.Reviewed by: hrsObtained from: Yandex LLCMFC after: 1 monthRelnotes: yesSponsored by: Yandex LLCDifferential Revision: https://reviews.freebsd.org/D6420 List of files: /freebsd-13.1/sbin/ipfw/Makefile Mon, 18 Jul 2016 19:46:31 +0000 Andrey V. Elsukov <ae@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/sbin/ipfw/Makefile#7de1daeb Create packages for atm, ccdconfig, devd, ipf, ipfw,iscsi, natd, nandfs, pf, quotacheck, and routed.Add ping6 and rtsol to the runtime package.Sponsored by: The FreeBSD Foundation List of files: /freebsd-13.1/sbin/ipfw/Makefile Tue, 09 Feb 2016 19:30:31 +0000 Glen Barber <gjb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/sbin/ipfw/Makefile#13eb765f Convert sbin/ to LIBADDReduce overlinking List of files: /freebsd-13.1/sbin/ipfw/Makefile Tue, 25 Nov 2014 11:23:12 +0000 Baptiste Daroussin <bapt@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/sbin/ipfw/Makefile#f1220db8 Move further to eliminate next pieces of number-assuming code inside tables.Kernel changes:* Add IP_FW_OBJ_FLUSH opcode (flush table based on its name/set)* Add IP_FW_OBJ_DUMP opcode (dumps table data based on its names/set)* Add IP_FW_OBJ_LISTSIZE / IP_FW_OBJ_LIST opcodes (get list of kernel tables)Userland changes:* move tables code to separate tables.c file* get rid of tables_max* switch "all"/list handling to new opcodes List of files: /freebsd-13.1/sbin/ipfw/Makefile Sat, 14 Jun 2014 22:47:25 +0000 Alexander V. Chernikov <melifaro@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/sbin/ipfw/Makefile#c6063d0d Use src.opts.mk in preference to bsd.own.mk except where we need stufffrom the latter. List of files: /freebsd-13.1/sbin/ipfw/Makefile Tue, 06 May 2014 04:22:01 +0000 Warner Losh <imp@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/sbin/ipfw/Makefile#9968f056 Fix world build WITHOUT_PF.Sponsored by: Nginx, Inc. List of files: /freebsd-13.1/sbin/ipfw/Makefile Wed, 12 Feb 2014 09:59:48 +0000 Gleb Smirnoff <glebius@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/sbin/ipfw/Makefile#8018e843 MFC of a large number of ipfw and dummynet fixes and enhancementsdone in CURRENT over the last 4 months.HEAD and RELENG_8 are almost in sync now for ipfw, dummynetthe pfil hooks and related components.Among the most noticeable changes:- r200855 more efficient lookup of skipto rules, and remove O(N) blocks from critical sections in the kernel;- r204591 large restructuring of the dummynet module, with support for multiple scheduling algorithms (4 available so far)See the original commit logs for details.Changes in the kernel/userland ABI should be harmless because thekernel is able to understand previous requests from RELENG_8 andRELENG_7. For this reason, this changeset would be applicableto RELENG_7 as well, but i am not sure if it is worthwhile. List of files: /freebsd-13.1/sbin/ipfw/Makefile Tue, 23 Mar 2010 09:58:59 +0000 Luigi Rizzo <luigi@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/sbin/ipfw/Makefile#a63e8ce9 add back DPADD (removed by mistake in a previous commit) List of files: /freebsd-13.1/sbin/ipfw/Makefile Mon, 08 Mar 2010 14:43:55 +0000 Luigi Rizzo <luigi@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/sbin/ipfw/Makefile#cc4d3c30 Bring in the most recent version of ipfw and dummynet, developedand tested over the past two months in the ipfw3-head branch. Thisalso happens to be the same code available in the Linux and Windowsports of ipfw and dummynet.The major enhancement is a completely restructured version ofdummynet, with support for different packet scheduling algorithms(loadable at runtime), faster queue/pipe lookup, and a much cleanerinternal architecture and kernel/userland ABI which simplifiesfuture extensions.In addition to the existing schedulers (FIFO and WF2Q+), we includea Deficit Round Robin (DRR or RR for brevity) scheduler, and a new,very fast version of WF2Q+ called QFQ.Some test code is also present (in sys/netinet/ipfw/test) thatlets you build and test schedulers in userland.Also, we have added a compatibility layer that understands requestsfrom the RELENG_7 and RELENG_8 versions of the /sbin/ipfw binaries,and replies correctly (at least, it does its best; sometimes youjust cannot tell who sent the request and how to answer).The compatibility layer should make it possible to MFC this code in arelatively short time.Some minor glitches (e.g. handling of ipfw set enable/disable,and a workaround for a bug in RELENG_7's /sbin/ipfw) will befixed with separate commits.CREDITS:This work has been partly supported by the ONELAB2 project, andmostly developed by Riccardo Panicucci and myself.The code for the qfq scheduler is mostly from Fabio Checconi,and Marta Carbone and Francesco Magno have helped with testing,debugging and some bug fixes. List of files: /freebsd-13.1/sbin/ipfw/Makefile Tue, 02 Mar 2010 17:40:48 +0000 Luigi Rizzo <luigi@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/sbin/ipfw/Makefile#bee10047 Fixed dependencies (make checkdpadd). List of files: /freebsd-13.1/sbin/ipfw/Makefile Thu, 25 Feb 2010 20:24:19 +0000 Ruslan Ermilov <ru@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/sbin/ipfw/Makefile#6882bf4d - fix dummynet 'fast' mode for WF2Q case.- fix printing of pipe profile data.- introduce new pipe parameter: 'burst' - how much data can be sent through pipe bypassing bandwidth limit. List of files: /freebsd-13.1/sbin/ipfw/Makefile Wed, 24 Jun 2009 22:57:07 +0000 Oleg Bulyzhin <oleg@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/sbin/ipfw/Makefile#23c608c8 put the altq-related functions into a separate file.Minor cleanup of the includes used by the various source files,including annotations of why certain headers are used. List of files: /freebsd-13.1/sbin/ipfw/Makefile Sun, 01 Feb 2009 16:00:49 +0000 Luigi Rizzo <luigi@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/sbin/ipfw/Makefile#50a99912 fix printing of uint64_t values, so we can use WARNS=2 List of files: /freebsd-13.1/sbin/ipfw/Makefile Tue, 27 Jan 2009 20:26:45 +0000 Luigi Rizzo <luigi@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/sbin/ipfw/Makefile#ead75a59 Put nat and ipv6 support in their own files.Usual moving of code with no changes from ipfw2.c to thenewly created files, and addition of prototypes to ipfw2.hI have added forward declarations for ipfw_insn_* in ipfw2.hto avoid a global dependency on ip_fw.h List of files: /freebsd-13.1/sbin/ipfw/Makefile Tue, 27 Jan 2009 12:01:30 +0000 Luigi Rizzo <luigi@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/sbin/ipfw/Makefile#d36bf6e7 never mind, for the time being let's stick with WARNS=0 untilwe sort out all proper printf formats. List of files: /freebsd-13.1/sbin/ipfw/Makefile Tue, 27 Jan 2009 11:03:47 +0000 Luigi Rizzo <luigi@FreeBSD.org>