Tobias Brunner a68454bd68 ike-sa-manager: Improve scalability of half-open IKE_SA checking ...

This patch is based on one by Christoph Gouault.

Currently, to count the total number of half_open IKE_SAs,
get_half_open_count sums up the count of each segment in the SA hash
table (acquiring a lock for each segment).  This procedure does not scale
well when the number of segments increases, as the method is called for
each new negotiation.

Instead, lets maintain a global atomic counter.

This optimization allows the use of big values for charon.ikesa_table_size
and charon.ikesa_table_segments.

2014-04-24 17:54:14 +02:00

..

eap

make TNC client authentication type available to IMVs

2013-02-12 20:38:05 +01:00

ikev1

libcharon: Use lib->ns instead of charon->name

2014-02-12 14:34:32 +01:00

ikev2

ikev2: Reject CHILD_SA creation/rekeying while deleting an IKE_SA

2014-04-17 09:59:06 +02:00

xauth

uclibc only defines strndup(3) if _GNU_SOURCE is defined

2014-02-19 16:11:47 +01:00

authenticator.c

Merge branch 'ikev1'

2012-05-02 11:12:31 +02:00

authenticator.h

Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, tasks etc.).

2012-05-18 10:04:08 +02:00

child_sa.c

child-sa: Add a getter for CHILD_SA install time

2014-01-23 16:19:22 +01:00

child_sa.h

child-sa: Add a getter for CHILD_SA install time

2014-01-23 16:19:22 +01:00

ike_sa_id.c

Store the major IKE version on ike_sa_id_t.

2012-03-20 17:31:40 +01:00

ike_sa_id.h

Fix various API doc issues and typos

2013-07-18 18:30:36 +02:00

ike_sa_manager.c

ike-sa-manager: Improve scalability of half-open IKE_SA checking

2014-04-24 17:54:14 +02:00

ike_sa_manager.h

Use XAuth/EAP remote identity for uniqueness check

2012-06-25 10:18:34 +02:00

ike_sa.c

ikev2: Apply extensions and conditions before starting rekeying

2014-04-17 09:24:51 +02:00

ike_sa.h

ikev2: Add inherit_pre() to apply config and hosts before IKE_SA rekeying

2014-04-17 09:24:51 +02:00

keymat.c

ike: Define keylength for aescmac algorithm

2013-10-11 10:15:21 +02:00

keymat.h

Fix various API doc issues and typos

2013-07-18 18:30:36 +02:00

shunt_manager.c

Moved data structures to new collections subfolder

2012-10-24 16:00:49 +02:00

shunt_manager.h

Moved data structures to new collections subfolder

2012-10-24 16:00:49 +02:00

task_manager.c

Don't invoke child_updown hook twice as responder

2012-04-11 17:45:12 +02:00

task_manager.h

ike_sa: Defer task manager destruction after child destruction

2014-01-16 14:16:13 +01:00

task.c

Added missing DPD task name

2012-03-20 17:31:35 +01:00

task.h

Fix various API doc issues and typos

2013-07-18 18:30:36 +02:00

trap_manager.c

trap-manager: Reset IKE_SA on bus_t if initiating fails

2013-11-21 13:43:31 +01:00

trap_manager.h

Reuse reqid for trap policies installed for dpd|closeaction=hold

2013-07-01 09:58:25 +02:00