 lgcosta
|
525fe7ee28
|
tests: gate assertions corrected (pfctl state format, transit egress device, CPU SRSO advisory excluded); Makefile demo target
|
2026-11-11 20:04:16 -03:00 |
|
|
lgcosta
|
18c0a69f74
|
tests: soak gate via uploaded helper (quoting), 04/05 assertions fixed (pf interface name vs OS device)
|
2026-11-11 19:59:27 -03:00 |
|
|
lgcosta
|
66939c839a
|
tests: 04 gate rewritten to OpenBSD-correct anchor semantics (reply is evaluated by the in ruleset); 05 gate uses 8.0 nat-to syntax; 14 quoting fixed; demo session + asciinema recorder
|
2026-11-11 19:54:29 -03:00 |
|
|
lgcosta
|
57ecc15606
|
divert: end-to-end working (network-order port, direct IN-verdict handoff, L2-synth reinjection, skip-mark anti-loop, pdivert ICMP checksum fix)
|
2026-11-11 19:45:29 -03:00 |
|
|
lgcosta
|
4728648a0c
|
divert: consume PF_TAG_DIVERTED after passthrough (BSD ip_input role); divert layer owns its own skb ref; gate uses pfput path
|
2026-11-11 19:19:53 -03:00 |
|
|
lgcosta
|
da1f678125
|
divert: fix NULL-deref on empty listener list (wedged pf0 in gate 11); gate 11 pdivert path; runner accepts gate filter arg
|
2026-11-11 19:15:48 -03:00 |
|
|
lgcosta
|
fd0be917fe
|
tests: 14-soak gate (state/traffic soak, dmesg clean, unload/reload cycles, slab delta)
|
2026-11-11 19:14:27 -03:00 |
|
|
lgcosta
|
4994c577cd
|
tests: divert gate syntax fixed (divert-to <host> port <n>), pdivert deploy; new 05-nat gate (nat-to egress, tcpdump proof)
|
2026-11-11 19:13:00 -03:00 |
|
|
lgcosta
|
7014628e8d
|
M2: refcnt_rele polarity, radix SALEN by family, LIST_HEAD dispatch + harness scp-failure hardening (gates 01-03 green)
|
2026-11-11 19:11:25 -03:00 |
|
|
lgcosta
|
493ec25fb3
|
tests: 11-divert gate design (noport drop + pdivert rewrite proof)
|
2026-11-11 18:52:57 -03:00 |
|
|
lgcosta
|
ac56534c3b
|
AF_DIVERT family restored & compiling: full socket family (PF_DIVERT=32, sock_register), blocking recv/poll, divert_output-compatible sendmsg reinject, mtag type passthrough; pfk_api decls
|
2026-11-11 18:47:04 -03:00 |
|
|
lgcosta
|
2690d6145c
|
tests: deterministic runner (per-gate VM reset), hardened unload path
|
2026-11-11 18:03:57 -03:00 |
|
|
lgcosta
|
a0941b77fe
|
M2 data path: BSD netisr workqueue + lock reentrancy fixes + diagnostics
- hooks: packets are queued to pfk_netisr ordered wq (process context) and
re-injected with an skb->mark guard (PFK_MARK_PASSED); softirq-safe,
documented divergence vs OpenBSD in-place ip_input continuation
- pfk_rwlock: per-task writer recursion (NET/PF lock nesting like OpenBSD)
- pfk_net: holder-task+depth reentrancy (pid-based hack removed)
- ifnet events deferred to ordered workqueue (rtnl AB-BA fix)
- idr iteration start index fix (kifs were never attached -> kif==NULL drop)
- pfk_lock_trace module param for lock diagnostics
- tests/vm: 01-state 02-block 03-tables 04-anchors + lib; vm-run-tests.sh
- docs/en/install.md: apply/build guide (core patch set currently EMPTY)
|
2026-11-11 17:05:53 -03:00 |
|
|
lgcosta
|
5323ee2c71
|
M2: live netfilter data path (pf_test per direction), pfattach bring-up, NET_LOCK reentrancy fix, static pfctl
- pfk_hooks: PRE→PF_IN, LOCAL_OUT/POST→PF_OUT v4+v6; replacement/buffer
handling with NF_STOLEN + re-injection (documented divergence: re-entry)
- pfk_mod: pf_status_init/pfattach + pfi attach via pfk_if event callback
- pfk_kern: NET_LOCK holder reentrancy (fix deadlock when notifier fires
under the write lock — observed as full-VM network hang)
- tools: static pfctl link for musl VMs
|
2026-11-11 15:20:01 -03:00 |
|