Page MenuHomeFreeBSD
Differential D31713

pf: Add counters for syncookies
ClosedPublic
Actions

Authored by kp on Aug 29 2021, 6:26 PM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Jul 13, 10:48 AM
Unknown Object (File)
Tue, Jul 7, 10:25 PM
Unknown Object (File)
Fri, Jul 3, 12:16 PM
Unknown Object (File)
Fri, Jul 3, 12:58 AM
Unknown Object (File)
Thu, Jul 2, 10:45 PM
Unknown Object (File)
Tue, Jun 30, 5:56 PM
Unknown Object (File)
Jun 15 2026, 12:24 AM
Unknown Object (File)
Jun 10 2026, 3:26 AM
View All Files
Subscribers
ae
farrokhi
imp
kbowling
melifaro

Details

Reviewers
kbowling
Group Reviewers
network
Commits
rG9136dfca19bf: pf: Add counters for syncookies
rG253d1f4e3161: pf: Add counters for syncookies
rG4cab80a8dfec: pf: Add counters for syncookies
Summary

Count when we send a syncookie, receive a valid syncookie or detect a
synflood.

MFC after: 1 week
Sponsored by: Modirum MDPay

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

kp created this revision.Aug 29 2021, 6:26 PM
Herald added subscribers: melifaro, farrokhi, ae, imp. · View Herald TranscriptAug 29 2021, 6:26 PM
kp requested review of this revision.Aug 29 2021, 6:26 PM
Harbormaster completed remote builds in B41250: Diff 94329.Aug 29 2021, 6:27 PM
kbowling added a subscriber: kbowling.Aug 31 2021, 2:20 AM
kbowling added inline comments.
sys/netpfil/pf/pf.h
165

I don't see this used anywhere, pf_synflood_check()?

kp added inline comments.Aug 31 2021, 7:56 AM
sys/netpfil/pf/pf.h
165

It's not used yet. It will be when I add the adaptive mode.

This is part of a series, and getting pushed slightly out of order, because this part is done and the adaptive mode needs a little more work.

kbowling accepted this revision.Aug 31 2021, 5:21 PM
This revision is now accepted and ready to land.Aug 31 2021, 5:21 PM
Closed by commit rG4cab80a8dfec: pf: Add counters for syncookies (authored by kp). · Explain WhySep 1 2021, 10:11 AM
This revision was automatically updated to reflect the committed changes.
kp added a commit: rG4cab80a8dfec: pf: Add counters for syncookies.
kp added a commit: rG253d1f4e3161: pf: Add counters for syncookies.Sep 8 2021, 12:04 PM
kp added a commit: rG9136dfca19bf: pf: Add counters for syncookies.

Revision Contents
Changeset List

PathSize
sys/
net/
2 lines
netpfil/
pf/
18 lines
10 lines
3 lines

Diff 94472

View Options

sys/net/pfvar.h

Loading...
View Options

sys/netpfil/pf/pf.h

Loading...
View Options

sys/netpfil/pf/pf_ioctl.c

Loading...
View Options

sys/netpfil/pf/pf_syncookies.c

Loading...