1/* $NetBSD: ipsecif.h,v 1.3 2019/11/01 04:28:14 knakahara Exp $ */
2
3/*
4 * Copyright (c) 2017 Internet Initiative Japan Inc.
5 * All rights reserved.
6 *
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted provided that the following conditions
9 * are met:
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in the
14 * documentation and/or other materials provided with the distribution.
15 *
16 * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
17 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
18 * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
19 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
20 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
21 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
22 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
23 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
24 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
25 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
26 * POSSIBILITY OF SUCH DAMAGE.
27 */
28
29#ifndef _NETIPSEC_IPSECIF_H_
30#define _NETIPSEC_IPSECIF_H_
31
32#include <net/if_ipsec.h>
33
34#define IPSEC_TTL 64
35#define IPSEC_HLIM 64
36
37#ifdef _KERNEL
38#ifdef INET6
39extern int ip6_ipsec_hlim;
40extern int ip6_ipsec_pmtu;
41
42#define IPSEC_PMTU_SYSDEFAULT -1 /* Use system default value (ip6_gif_pmtu) */
43#define IPSEC_PMTU_MINMTU 0 /* Fragmented by IPV6_MINMTU */
44#define IPSEC_PMTU_OUTERMTU 1 /* Fragmented by Path MTU of outer path */
45#endif
46
47int ipsecif4_encap_func(struct mbuf *, struct ip *, struct ipsec_variant *);
48int ipsecif4_attach(struct ipsec_variant *);
49int ipsecif4_detach(struct ipsec_variant *);
50
51int ipsecif6_encap_func(struct mbuf *, struct ip6_hdr *, struct ipsec_variant *);
52int ipsecif6_attach(struct ipsec_variant *);
53int ipsecif6_detach(struct ipsec_variant *);
54void *ipsecif6_ctlinput(int, const struct sockaddr *, void *, void *);
55#endif
56
57#endif /*_NETIPSEC_IPSECIF_H_*/