Index: share/man/man4/inet.4 =================================================================== --- share/man/man4/inet.4 +++ share/man/man4/inet.4 @@ -158,38 +158,36 @@ API. .El .Ss MIB Variables -A number of variables are implemented in the net.inet branch of the +In addition to the variables supported by the transport protocols in +.Va net.inet +(for which the respective manual pages may be consulted), +there are a number of general variables implemented in the +.Va net.inet.ip +branch of the .Xr sysctl 3 MIB. -In addition to the variables supported by the transport protocols -(for which the respective manual pages may be consulted), -the following general variables are defined: -.Bl -tag -width IPCTL_ACCEPTSOURCEROUTE -.It Dv IPCTL_FORWARDING -.Pq ip.forwarding +The following general variabls are defined: +.Bl -tag -width ".Va accept_sourceroute" +.It Va forwarding Boolean: enable/disable forwarding of IP packets. Defaults to off. -.It Dv IPCTL_SENDREDIRECTS -.Pq ip.redirect +.It Va redirect Boolean: enable/disable sending of ICMP redirects in response to .Tn IP packets for which a better, and for the sender directly reachable, route and next hop is known. Defaults to on. -.It Dv IPCTL_DEFTTL -.Pq ip.ttl +.It Va ttl Integer: default time-to-live .Pq Dq TTL to use for outgoing .Tn IP packets. -.It Dv IPCTL_ACCEPTSOURCEROUTE -.Pq ip.accept_sourceroute +.It Va accept_sourceroute Boolean: enable/disable accepting of source-routed IP packets (default false). -.It Dv IPCTL_SOURCEROUTE -.Pq ip.sourceroute +.It Va sourceroute Boolean: enable/disable forwarding of source-routed IP packets (default false). -.It Va ip.process_options +.It Va process_options Integer: control IP options processing. By setting this variable to 0, all IP options in the incoming packets will be ignored, and the packets will be passed unmodified. @@ -204,9 +202,9 @@ .Xr sysctl 8 variable affects packets destined for a local host as well as packets forwarded to some other host. -.It Va ip.rfc1122_strong_es +.It Va rfc1122_strong_es Boolean: in non-forwarding mode -.Pq ip.forwarding is disabled +.Pq forwarding is disabled partially implement the Strong End System model per RFC1122. If a packet with destination address that is local arrives on a different interface than the interface the address belongs to, the packet would be @@ -219,7 +217,7 @@ .Xr pfil 4 filters may override and bypass this check. Disabled by default. -.It Va ip.source_address_validation +.It Va source_address_validation Boolean: perform source address validation for packets destined for the local host. Consider this as following Section 3.2 of RFC3704/BCP84, where we treat local @@ -227,7 +225,7 @@ This has no effect on packets to be forwarded, so don't consider it as anti-spoof feature for a router. Enabled by default. -.It Va ip.rfc6864 +.It Va rfc6864 Boolean: control IP IDs generation behaviour. True value enables RFC6864 support, which specifies that IP ID field of .Em atomic @@ -235,14 +233,14 @@ The .Fx implementation sets it to zero. Enabled by default. -.It Va ip.random_id +.It Va random_id Boolean: control IP IDs generation behaviour. Setting this .Xr sysctl 8 to 1 causes the ID field in .Em non-atomic IP datagrams (or all IP datagrams, if -.Va ip.rfc6864 +.Va rfc6864 is disabled) to be randomized instead of incremented by 1 with each packet generated. This closes a minor information leak which allows remote observers to @@ -252,21 +250,21 @@ cycle greatly. Default is 0 (sequential IP IDs). IPv6 flow IDs and fragment IDs are always random. -.It Va ip.maxfrags +.It Va maxfrags Integer: maximum number of fragments the host will accept and simultaneously hold across all reassembly queues in all VNETs. If set to 0, reassembly is disabled. If set to -1, this limit is not applied. This limit is recalculated when the number of mbuf clusters is changed. This is a global limit. -.It Va ip.maxfragpackets +.It Va maxfragpackets Integer: maximum number of fragmented packets the host will accept and simultaneously hold in the reassembly queue for a particular VNET. 0 means that the host will not accept any fragmented packets for that VNET. \-1 means that the host will not apply this limit for that VNET. This limit is recalculated when the number of mbuf clusters is changed. This is a per-VNET limit. -.It Va ip.maxfragbucketsize +.It Va maxfragbucketsize Integer: maximum number of reassembly queues per bucket. Fragmented packets are hashed to buckets. Each bucket has a list of reassembly queues. @@ -276,21 +274,21 @@ queues allowed in each bucket. This limit is recalculated when the number of mbuf clusters is changed or when the value of -.Va ip.maxfragpackets +.Va maxfragpackets changes. This is a per-VNET limit. -.It Va ip.maxfragsperpacket +.It Va maxfragsperpacket Integer: maximum number of fragments the host will accept and hold in the reassembly queue for a packet. 0 means that the host will not accept any fragmented packets for the VNET. This is a per-VNET limit. -.It Va ip.allow_net0 +.It Va allow_net0 Boolean: allow experimental use of addresses in 0.0.0.0/8 as endpoints, and allow forwarding of packets with these addresses. -.It Va ip.allow_net240 +.It Va allow_net240 Boolean: allow experimental use of addresses in 240.0.0.0/4 as endpoints, and allow forwarding of packets with these addresses. -.It Va ip.loopback_prefixlen +.It Va loopback_prefixlen Integer: prefix length of the address space reserved for loopback purposes. The default is 8, meaning that 127.0.0.0/8 is reserved for loopback, and cannot be sent, received, or forwarded on a non-loopback interface. Index: share/man/man4/tcp.4 =================================================================== --- share/man/man4/tcp.4 +++ share/man/man4/tcp.4 @@ -421,9 +421,8 @@ branch of the .Xr sysctl 3 MIB. -.Bl -tag -width ".Va TCPCTL_DO_RFC1323" -.It Dv TCPCTL_DO_RFC1323 -.Pq Va rfc1323 +.Bl -tag -width ".Va v6pmtud_blackhole_mss" +.It Va rfc1323 Implement the window scaling and timestamp options of RFC 1323/RFC 7323 (default is true). .It Va tolerate_missing_ts @@ -437,18 +436,15 @@ As of June 2021, several TCP stacks are known to violate RFC 7323, including modern widely deployed ones. Therefore the default is 1, i.e., the missing of timestamps is tolerated. -.It Dv TCPCTL_MSSDFLT -.Pq Va mssdflt +.It Va mssdflt The default value used for the maximum segment size .Pq Dq MSS when no advice to the contrary is received from MSS negotiation. -.It Dv TCPCTL_SENDSPACE -.Pq Va sendspace +.It Va sendspace Maximum .Tn TCP send window. -.It Dv TCPCTL_RECVSPACE -.Pq Va recvspace +.It Va recvspace Maximum .Tn TCP receive window. Index: share/man/man4/udp.4 =================================================================== --- share/man/man4/udp.4 +++ share/man/man4/udp.4 @@ -114,24 +114,21 @@ The .Nm protocol implements a number of variables in the -.Li net.inet +.Va net.inet.udp branch of the .Xr sysctl 3 -MIB. -.Bl -tag -width UDPCTL_RECVSPACEX -.It UDPCTL_CHECKSUM -.Pq udp.checksum +MIB: +.Bl -tag -width ".Va log_in_vain" +.It Va checksum Enable udp checksums (enabled by default). -.It UDPCTL_MAXDGRAM -.Pq udp.maxdgram +.It Va maxdgram Maximum outgoing UDP datagram size -.It UDPCTL_RECVSPACE -.Pq udp.recvspace +.It Va recvspace Maximum space for incoming UDP datagrams -.It udp.log_in_vain +.It Va log_in_vain For all udp datagrams, to ports on which there is no socket listening, log the connection attempt (disabled by default). -.It udp.blackhole +.It Va blackhole When a datagram is received on a port where there is no socket listening, do not return an ICMP port unreachable message. (Disabled by default.