Copy stable/10@r272459 to releng/10.1 as part of
the 10.1-RELEASE process.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Merge r257846:
Make TCP_KEEP* socket options readable. At least PostgreSQL wants
to read the values.

Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

o Xr siftr.4 in order to expose it to a wider audience.

Reviewed by: lstewart

o Trim EoL whitespaces.

Remove undesired sysctl(3) xref

Submitted by: bde

Correct markup, use proper reference for sysctl(3)

Submitted by: brueffer@

Inbound TCP-MD5 digest validation is now supported

Add new socket options: TCP_KEEPINIT, TCP_KEEPIDLE, TCP_KEEPINTVL and
TCP_KEEPCNT, that allow to control initial timeout, idle time, idle
re-send interval and idle send count on a per-socket basis.

Reviewed by: andre, bz, lstewart

Remove mention of ss_fltsz and ss_fltsz_local which were retired in r226447.

Rename the cc.4 and cc.9 modular congestion control related man pages to
mod_cc.4 and mod_cc.9 respectively to avoid any possible confusion with the cc.1
gcc man page. Update references to these man pages where required.

Requested by: Grenville Armitage
Approved by: re (kib)
MFC after: 3 days

Final commit to round out the "Five New TCP Congestion Control Algorithms for
FreeBSD" FreeBSD Foundation funded project.

- Add new man pages for the modular congestion control, Khelp and Hhook
frameworks (cc.4, cc.9, khelp.9 and hhook.9).

- Add new man pages for each available congestion control algorithm (cc_chd.4,
cc_cubic.4, cc_hd.4, cc_htcp.4, cc_newreno.4 and cc_vegas.4).

- Add a new man page for the Enhanced Round Trip Time (ERTT) Khelp module
(h_ertt.4).

- Update the TCP (tcp.4) man page to mention the TCP_CONGESTION socket option,
cross reference to cc.4 and remove references to the retired
"net.inet.tcp.newreno" sysctl MIB variable.

In collaboration with: David Hayes <dahayes at swin edu au> and
Grenville Armitage <garmitage at swin edu au>
Sponsored by: FreeBSD Foundation
MFC after: 3 months

Clarify when we switch from keepidle to keepinvtl intervals if sending
TCP keepalive probes is enabled.

Reviewed by: gnn
MFC After: 3 days

The inflight bandwidth limiter was removed in r212765.

Add ECN sysctls and ECN RFC.

Kill whitespace at EOL.

More cleanup for rev. 1.56

Submitted by: ru

mdoc cleanup for the previous commit and touch .Dd

Update the tcp(4) manpage with the new (and some older undocumented) sysctls.
Remove a sysctl that is no longer used.

Document the existence of the TCP_INFO socket option.

Approved by: rwatson

Fix markup bug in last commit.

Submitted by: ru

Document net.inet.tcp.maxtcptw and net.inet.tcp.nolocaltimewait.

Wording by: Devon O'Dell

Remove all references to T/TCP, which was removed several months ago.

Approved by: andre

Remove RFC1644 T/TCP support from the TCP side of the network stack.

A complete rationale and discussion is given in this message
and the resulting discussion:

http://docs.freebsd.org/cgi/mid.cgi?4177C8AD.6060706

Note that this commit removes only the functional part of T/TCP
from the tcp_* related functions in the kernel. Other features
introduced with RFC1644 are left intact (socket layer changes,
sendmsg(2) on connection oriented protocols) and are meant to
be reused by a simpler and less intrusive reimplemention of the
previous T/TCP functionality.

Discussed on: -arch

Rephrase certain centences and sync description of default values to reality.

s/Oct /October/

Pointed out by: ru

Bump the date of the document.

Document net.inet.tcp.sack.initburst sysctl.

o Move the inflight sysctls to their own sub-tree under net.inet.tcp to be
more consistent with the other sysctls around it.

o Document net.inet.sack.enable sysctl. net.inet.sack.sackhole_limit
is not documented yet, it is not used at the moment and is the subject
of the future work.

Improved by: ru
Not objected: ps, jayanth

Spelling fixes.

Assorted markup, spelling, and grammar fixes.

Correct the misuse of \- (mdoc(7) mathematical minus) when - (mdoc(7)
hyphen) is meant.

Mdoc(7) clue by: ru
Reviewed by: ru

Shorten the name of the socket option used to enable TCP-MD5 packet
treatment.

Submitted by: Vincent Jardin

Spell tcp_signature_compute correctly.

Initial import of RFC 2385 (TCP-MD5) digest support.

This is the first of two commits; bringing in the kernel support first.
This can be enabled by compiling a kernel with options TCP_SIGNATURE
and FAST_IPSEC.

For the uninitiated, this is a TCP option which provides for a means of
authenticating TCP sessions which came into being before IPSEC. It is
still relevant today, however, as it is used by many commercial router
vendors, particularly with BGP, and as such has become a requirement for
interconnect at many major Internet points of presence.

Several parts of the TCP and IP headers, including the segment payload,
are digested with MD5, including a shared secret. The PF_KEY interface
is used to manage the secrets using security associations in the SADB.

There is a limitation here in that as there is no way to map a TCP flow
per-port back to an SPI without polluting tcpcb or using the SPD; the
code to do the latter is unstable at this time. Therefore this code only
supports per-host keying granularity.

Whilst FAST_IPSEC is mutually exclusive with KAME IPSEC (and thus IPv6),
TCP_SIGNATURE applies only to IPv4. For the vast majority of prospective
users of this feature, this will not pose any problem.

This implementation is output-only; that is, the option is honoured when
responding to a host initiating a TCP session, but no effort is made
[yet] to authenticate inbound traffic. This is, however, sufficient to
interwork with Cisco equipment.

Tested with a Cisco 2501 running IOS 12.0(27), and Quagga 0.96.4 with
local patches. Patches for tcpdump to validate TCP-MD5 sessions are also
available from me upon request.

Sponsored by: sentex.net

mdoc(7): Use the new feature of the .In macro.

mdoc(7) police: Tidy up the formatting.

Document the net.inet.tcp.rfc3390 sysctl variable.

Document the net.inet.tcp.rfc3042 sysctl variable.

Fix typos, mostly s/ an / a / where appropriate and a few s/an/and/
Add FreeBSD Id tag where missing.

english(4) police.

Spelling: s/then/than/ where appropriate.

Added xref to syncache(4).

mdoc(7) police: markup and grammar fixes for previous delta.

Change tcp.inflight_min from 1024 to a production default of 6144. Create
a sysctl for the stabilization value for the bandwidth delay product (inflight)
algorithm and document it.

MFC after: 3 days

mdoc(7) police: scheduled sweep.

Approved by: re

Add A section on the retransmit timer sysctls.

MFC after: 3 days

Oops, last manual commit was to -stable, should have been to -current.
No biggy, the code MFC to stable will catch up to the docs in a week.

X-MFC after: -7 days

Describe possible values for net.inet.tcp.log_in_vain
and their effects.

PR: docs/35932
Submitted by: Alex Semenyaka <alexs@ratmir.ru>
MFC after: 1 week

Update documentation relating to sysctls in a post-syncache
world. Goodbye tcp.tcp_lq_overflow and tcp.strict_rfc1948,
hello tcp.syncookies.

MFC after: 3 days

Ispell sweep of share/man/man4.

o Clarify that various sysctl timing values are in milliseconds.

mdoc(7) police: Use the new .In macro for #include statements.

Document two sysctl variables used by RFC 1948 functionality.

While I'm here, fix two markup inconsistencies.

Submitted by: silby

Removed whitespace at end-of-line; no content changes. I simply did
cd src/share; find man[1-9] -type f|xargs perl -pi -e 's/[ \t]+$//'

BTW, what editors are the culprits? I'm using vim and it shows
me whitespace at EOL in troff files with a thick blue block...

Reviewed by: Silence from cvs diff -b
MFC after: 7 days

mdoc(7) police: removed HISTORY info from the .Os call.

mdoc(7) police: sort SEE ALSO xrefs (sort -b -f +2 -3 +1 -2).

Describe all current net.inet.tcp MIB variables.

Submitted by: jlemon
MFC after: 1 week

mdoc(7) police: rename the DIAGNOSTICS section to ERRORS to match the
content, and correct the parameters to the -tag list therein.

Reviewed by: ru

Prepare for mdoc(7)NG.

Document the NewReno sysctl knob.

Submitted by: jlemon

Supply only one author name per instance of %A, as per mdoc.samples(7).

PR: 18465
Submitted by: Kazu TAKAMUNE <takamune@avrl.mei.co.jp>

$Id$ -> $FreeBSD$

Document a whole truckload of sysctl MIBs under net.inet.tcp,
including tcp.blackhole, tcp.log_in_vain and others.

Fixed missing #include(s) (mostly of <sys/types.h> in synopsis).

Reviewed by: wollman

Revert $FreeBSD$ back to $Id$

Make the long-awaited change from $Id$ to $FreeBSD$

This will make a number of things easier in the future, as well as (finally!)
avoiding the Id-smashing problem which has plagued developers for so long.

Boy, I'm glad we're not using sup anymore. This update would have been
insane otherwise.

Sort cross references.

Correct some man page xrefs, and some other minor changes to bring some
man pages up to mdoc guidelines and fix some minor formatting glitches.
Also fixed a number of man pages to not abuse the .Xr macro to
display functions and path names and a lot of other junk.

Document Transaction TCP.

Document TCP MIB variables (tcp.4).
Document IP MIB variables (inet.4).
Document Internet-family protocol-specified route cloning (inet.4).
Delete all references to classed addresses (inet.4).

Document EAFNOSUPPORT error return for TCP bind and connect operations.

This commit was generated by cvs2svn to compensate for changes in r1638,
which included commits to RCS files with non-trunk default branches.

BSD 4.4 Lite Share Sources