Changes in Makefile

744bfb21 - Import the WireGuard driver from zx2c4.com.

Fri, 28 Oct 2022 20:36:12 +0000

Import the WireGuard driver from zx2c4.com.This commit brings back the driver from FreeBSD commitf187d6dfbf633665ba6740fe22742aec60ce02a2 plus subsequent fixes fromupstream.Relative to upstream this commit includes a few other small fixes suchas additional INET and INET6 #ifdef's, #include cleanups, and updatesfor recent API changes in main.Reviewed by: pauamma, gbe, kevans, emasteObtained from: git@git.zx2c4.com:wireguard-freebsd @ 3cc22b2Sponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D36909 List of files: /freebsd-14.2/sys/modules/if_wg/Makefile

74ae3f3e - if_wg: import latest fixup work from the wireguard-freebsd project

Mon, 15 Mar 2021 02:25:40 +0000

if_wg: import latest fixup work from the wireguard-freebsd projectThis is the culmination of about a week of work from three developers tofix a number of functional and security issues. This patch consists ofwork done by the following folks:- Jason A. Donenfeld - Matt Dunwoodie - Kyle Evans Notable changes include:- Packets are now correctly staged for processing once the handshake has completed, resulting in less packet loss in the interim.- Various race conditions have been resolved, particularly w.r.t. socket and packet lifetime (panics)- Various tests have been added to assure correct functionality and tooling conformance- Many security issues have been addressed- if_wg now maintains jail-friendly semantics: sockets are created in the interface's home vnet so that it can act as the sole network connection for a jail- if_wg no longer fails to remove peer allowed-ips of 0.0.0.0/0- if_wg now exports via ioctl a format that is future proof and complete. It is additionally supported by the upstream wireguard-tools (which we plan to merge in to base soon)- if_wg now conforms to the WireGuard protocol and is more closely aligned with security auditing guidelinesNote that the driver has been rebased away from using iflib. iflibposes a number of challenges for a cloned device trying to operate in avnet that are non-trivial to solve and adds complexity to theimplementation for little gain.The crypto implementation that was previously added to the tree was asuper complex integration of what previously appeared in an old out oftree Linux module, which has been reduced to crypto.c containing simpleboring reference implementations. This is part of a near-to-mid termgoal to work with FreeBSD kernel crypto folks and take advantage of orimprove accelerated crypto already offered elsewhere.There's additional test suite effort underway out-of-tree takingadvantage of the aforementioned jail-friendly semantics to test a numberof real-world topologies, based on netns.sh.Also note that this is still a work in progress; work going further willbe much smaller in nature.MFC after: 1 month (maybe) List of files: /freebsd-14.2/sys/modules/if_wg/Makefile

6f968a33 - Make non-debug kernels installable.

Thu, 17 Dec 2020 14:20:36 +0000

Make non-debug kernels installable.Setting DEBUG_FLAGS results in make installkernel trying to install debuginformation that doesn't exist if the kernel was built without it. List of files: /freebsd-14.2/sys/modules/if_wg/Makefile

75dd1182 - if_wg: appease gcc

Fri, 11 Dec 2020 22:52:03 +0000

if_wg: appease gcc - remove -ferror-limit option - quiet -Wredundant-declsReviewed by: mmacySponsored by: Dell EMC IsilonDifferential Revision: https://reviews.freebsd.org/D27559 List of files: /freebsd-14.2/sys/modules/if_wg/Makefile

2338da03 - Import kernel WireGuard support

Sun, 29 Nov 2020 19:38:03 +0000

Import kernel WireGuard supportData path largely shared with the OpenBSD implementation byMatt Dunwoodie Reviewed by: grehan@freebsd.orgMFC after: 1 monthSponsored by: Rubicon LLC, (Netgate)Differential Revision: https://reviews.freebsd.org/D26137 List of files: /freebsd-14.2/sys/modules/if_wg/Makefile