CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/02/01 23:23:40
Modified files:
sys/kern : uipc_mbuf.c
sys/net : if_mpw.c if_tpmr.c if_veb.c pf.c pfvar.h
pfvar_priv.h
sys/netinet : in_pcb.h
sys/sys : mbuf.h
Log message:
use pf_states to link mbufs/inpcbs and forwarded connections together
this replaces the links between pf_state_keys and mbufs/inpcbs.
pf_states represent the actual connection tracked by pf, while
pf_state_keys are more general since they only contain the network
addresses. the fact that pf_state_keys exist is an implementation
detail in pf rather than a fundamentally useful artifact to the
rest of the system. the preference would have been to link things
to pf_states rather than pf_state_keys in the first place, but there
wasn't enough machinery (eg, refcounts and immutable links to
pf_state_keys) on pf_states to link to them directly. this means
pf still had to iterate over the states hanging off the pf_state_keys
to get to the actual pf_state it needed anyway.
discussed with henning@
ok sashan@ jmatthew@
