Mindaugas Rasiukevicius

Add support for the BPF "coprocessor" (BPF_COP and BPF_COPX instructions)

8

Add support for the BPF "coprocessor": a raw primitive ("cop" keyword) to invoke a function provided by a coprocessor. References: - http://lists.sandelman.ca/pipermail/tcpdump-workers/2015-May/000256.html - http://mail-index.netbsd.org/tech-net/2013/08/22/msg004197.html

Configuration exporting (`npfctl save`) does not capture the following: - ALG and its state associated with the NAT entry (see `npf_nat_export()`). - Rule procedure calls and parameters (see `npf_rprocset_export()`). The...

- Race condition when unloading ALG module: `npf_nat_freealg()` vs lock-free readers. - Inspection as a loop in `npf_alg_conn()` is not particularly efficient. It could be optimized to be: 1) per-protocol...

FYI: There have been many improvements in the [upstream NPF](https://github.com/rmind/npf/). Some highlights: - NPF was converted to use libnv, instead of libprop (proplib). [libnv](https://github.com/rmind/nvlist) is FreeBSD's name/value pairs library. This...