sys/netipsec/ipsec_var.h

   1 /*      $NetBSD: ipsec_var.h,v 1.4 2005/12/10 23:44:08 elad Exp $ */
   2 /*      $FreeBSD: src/sys/netipsec/ipsec.h,v 1.2.4.2 2004/02/14 22:23:23 bms Exp $      */
   3
   4 /*-
   5  * Copyright (c) 2002, 2003 Sam Leffler, Errno Consulting
   6  * All rights reserved.
   7  *
   8  * Redistribution and use in source and binary forms, with or without
   9  * modification, are permitted provided that the following conditions
  10  * are met:
  11  * 1. Redistributions of source code must retain the above copyright
  12  *    notice, this list of conditions and the following disclaimer.
  13  * 2. Redistributions in binary form must reproduce the above copyright
  14  *    notice, this list of conditions and the following disclaimer in the
  15  *    documentation and/or other materials provided with the distribution.
  16  *
  17  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
  18  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  19  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  20  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  21  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  22  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  23  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  24  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  25  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  26  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  27  * SUCH DAMAGE.
  28  *
  29  * $FreeBSD: src/tools/tools/crypto/ipsecstats.c,v 1.1.4.1 2003/06/03 00:13:13 sam Exp $
  30  */
  31
  32 #ifndef _NETIPSEC_IPSEC_VAR_H_
  33 #define _NETIPSEC_IPSEC_VAR_H_
  34
  35 /*
  36  * statistics for ipsec processing
  37  * Each counter is an unsigned 64-bit value.
  38  */
  39 #define IPSEC_STAT_IN_POLVIO    0       /* input: sec policy violation */
  40 #define IPSEC_STAT_OUT_POLVIO   1       /* output: sec policy violation */
  41 #define IPSEC_STAT_OUT_NOSA     2       /* output: SA unavailable */
  42 #define IPSEC_STAT_OUT_NOMEM    3       /* output: no memory available */
  43 #define IPSEC_STAT_OUT_NOROUTE  4       /* output: no route available */
  44 #define IPSEC_STAT_OUT_INVAL    5       /* output: generic error */
  45 #define IPSEC_STAT_OUT_BUNDLESA 6       /* output: bundled SA processed */
  46 #define IPSEC_STAT_MBCOALESCED  7       /* mbufs coalesced during clone */
  47 #define IPSEC_STAT_CLCOALESCED  8       /* clusters coalesced during clone */
  48 #define IPSEC_STAT_CLCOPIED     9       /* clusters copied during clone */
  49 #define IPSEC_STAT_MBINSERTED   10      /* mbufs inserted during makespace */
  50 #define IPSEC_STAT_SPDCACHELOOKUP 11
  51 #define IPSEC_STAT_SPDCACHEMISS 12
  52 #define IPSEC_STAT_INPUT_FRONT  13
  53 #define IPSEC_STAT_INPUT_MIDDLE 14
  54 #define IPSEC_STAT_INPUT_END    15
  55
  56 #define IPSEC_NSTATS            16
  57
  58 /*
  59  * Definitions for IPsec & Key sysctl operations.
  60  */
  61 /*
  62  * Names for IPsec & Key sysctl objects
  63  */
  64 #define IPSECCTL_STATS                  1       /* KAME compat stats */
  65 #define IPSECCTL_DEF_POLICY             2
  66 #define IPSECCTL_DEF_ESP_TRANSLEV       3       /* int; ESP transport mode */
  67 #define IPSECCTL_DEF_ESP_NETLEV         4       /* int; ESP tunnel mode */
  68 #define IPSECCTL_DEF_AH_TRANSLEV        5       /* int; AH transport mode */
  69 #define IPSECCTL_DEF_AH_NETLEV          6       /* int; AH tunnel mode */
  70 #if 0   /* obsolete, do not reuse */
  71 #define IPSECCTL_INBOUND_CALL_IKE       7
  72 #endif
  73 #define IPSECCTL_AH_CLEARTOS            8
  74 #define IPSECCTL_AH_OFFSETMASK          9
  75 #define IPSECCTL_DFBIT                  10
  76 #define IPSECCTL_ECN                    11
  77 #define IPSECCTL_DEBUG                  12
  78 #define IPSECCTL_ESP_RANDPAD            13
  79 #define IPSECCTL_MAXID                  14
  80
  81 #define IPSECCTL_NAMES { \
  82         { 0, 0 }, \
  83         { 0, 0 }, \
  84         { "def_policy", CTLTYPE_INT }, \
  85         { "esp_trans_deflev", CTLTYPE_INT }, \
  86         { "esp_net_deflev", CTLTYPE_INT }, \
  87         { "ah_trans_deflev", CTLTYPE_INT }, \
  88         { "ah_net_deflev", CTLTYPE_INT }, \
  89         { 0, 0 }, \
  90         { "ah_cleartos", CTLTYPE_INT }, \
  91         { "ah_offsetmask", CTLTYPE_INT }, \
  92         { "dfbit", CTLTYPE_INT }, \
  93         { "ecn", CTLTYPE_INT }, \
  94         { "debug", CTLTYPE_INT }, \
  95         { "esp_randpad", CTLTYPE_INT }, \
  96 }
  97
  98 #define IPSEC6CTL_NAMES { \
  99         { 0, 0 }, \
 100         { 0, 0 }, \
 101         { "def_policy", CTLTYPE_INT }, \
 102         { "esp_trans_deflev", CTLTYPE_INT }, \
 103         { "esp_net_deflev", CTLTYPE_INT }, \
 104         { "ah_trans_deflev", CTLTYPE_INT }, \
 105         { "ah_net_deflev", CTLTYPE_INT }, \
 106         { 0, 0 }, \
 107         { 0, 0 }, \
 108         { 0, 0 }, \
 109         { 0, 0 }, \
 110         { "ecn", CTLTYPE_INT }, \
 111         { "debug", CTLTYPE_INT }, \
 112         { "esp_randpad", CTLTYPE_INT }, \
 113 }
 114
 115 #endif /* !_NETIPSEC_IPSEC_VAR_H_ */