Andrew Gallatin 11331aaab8 ktls: Add a tunable to disable TLS receive ...

TLS receive offload is really only beneficial for in-kernel use cases
(such as NFS over TLS) or when using a hardware offload.  In addition,
several recent SAs have involved the TLS receive path, but the only
current mitigation for those is to disable TLS offload entirely.

Approved by:	so
Security:	FreeBSD-SA-26:67.ktls
Reviewed by:	ziaee, gallatin, markj
Relnotes:	yes
Sponsored by:	Netflix
Sponsored by:	Chelsio Communications
Co-authored-by:	John Baldwin <[email protected]>
Differential Revision:	https://reviews.freebsd.org/D57974

(cherry picked from commit 08cda4bcd4)
(cherry picked from commit 4d3f5d2ca4)

2026-09-29 01:01:48 +00:00

..

colldef

Remove residual blank line at start of Makefile

2024-07-15 16:43:39 -06:00

colldef_unicode

locale: make install Unicode 17.0.0/CLDR 48

2025-12-13 04:14:46 +00:00

ctypedef

locale: make install Unicode 17.0.0/CLDR 48

2025-12-13 04:14:46 +00:00

dict

share/dict/web2: Sort

2026-03-11 12:46:55 -04:00

doc

pkgbase: Move all of ATF into the atf package

2026-04-07 15:52:08 +00:00

dtrace

ipfw.d: Add required dependency declarations

2024-12-16 22:09:39 +00:00

examples

sound examples: Add mmap example

2026-04-21 11:37:57 +02:00

firmwares

iwmfw(4): fix spelling of the iwm8000C firmware.

2025-12-15 18:09:21 +00:00

i18n

Remove residual blank line at start of Makefile

2024-07-15 16:43:39 -06:00

keys

Add backup pkgbase signing key held by security-officer.

2025-11-22 11:15:42 -08:00

man

ktls: Add a tunable to disable TLS receive

2026-09-29 01:01:48 +00:00

misc

usb_vendors: update to 2025.12.13

2026-02-19 10:12:34 +01:00

mk

bsd.linker.mk: Sort list of linker features

2026-04-24 11:44:03 -04:00

monetdef

locale: make posix

2025-12-13 04:13:31 +00:00

monetdef_unicode

locale: make install Unicode 17.0.0/CLDR 48

2025-12-13 04:14:46 +00:00

msgdef

msgdef: fix NO and SI locales

2023-09-21 12:54:21 +02:00

msgdef_unicode

locale: make install

2025-12-13 04:13:56 +00:00

numericdef

Remove residual blank line at start of Makefile

2024-07-15 16:43:39 -06:00

numericdef_unicode

locale: make install Unicode 17.0.0/CLDR 48

2025-12-13 04:14:46 +00:00

security

Remove residual blank line at start of Makefile

2024-07-15 16:43:39 -06:00

sendmail

share/sendmail: Use consistent ordering when processing files

2025-09-04 18:06:28 +00:00

skel

Bourne shell -> POSIX shell

2026-04-20 12:18:37 -04:00

snmp

Remove residual blank line at start of Makefile

2024-07-15 16:43:39 -06:00

syscons

INDEX.fonts: Minor maintenance

2026-02-05 16:50:11 -05:00

tabset

Remove residual blank line at start of Makefile

2024-07-15 16:43:39 -06:00

termcap

termcap: fix screen entry standout mode (so/se) capabilities

2026-04-28 07:19:25 -07:00

tests

Remove residual blank line at start of Makefile

2024-07-15 16:43:39 -06:00

timedef

timedef: remove redundancy in Catalan date_fmt definitions

2024-11-13 16:12:42 -06:00

vt

us.intl.acc.kbd: add it to Makefile

2026-04-17 23:23:29 -03:00

zoneinfo

zoneinfo: don't install version

2025-05-22 01:17:49 +08:00

Makefile

iwm: Stop shipping firmware as kernel module

2024-12-16 10:44:47 +01:00

Makefile.inc

Remove residual blank line at start of Makefile

2024-07-15 16:43:39 -06:00