Introduce new IPsec (per-CPU) statistics and refactor ESP input
authormpi <mpi@openbsd.org>
Tue, 10 Jul 2018 11:34:12 +0000 (11:34 +0000)
committermpi <mpi@openbsd.org>
Tue, 10 Jul 2018 11:34:12 +0000 (11:34 +0000)
commit4ec8e25772ec895c764863f5d4828a7311b1d90e
tree52f7e327a84e6deb7029f5167debed42db5b0c6f
parent6fc43f81fc51d876a84da1486c86722c42d95868
Introduce new IPsec (per-CPU) statistics and refactor ESP input
callbacks to be able to count dropped packet.

Having more generic statistics will help troubleshooting problems
with specific tunnels.  Per-TDB counters are coming once all the
refactoring bits are in.

ok markus@
sys/netinet/in.h
sys/netinet/ip_esp.c
sys/netinet/ip_input.c
sys/netinet/ip_ipsp.h
sys/netinet/ipsec_input.c