Page MenuHomeFreeBSD
Differential D36886

pf tests: test fast port re-use with syncookies
ClosedPublic
Actions

Authored by kp on Oct 5 2022, 4:38 PM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, May 12, 12:33 AM
Unknown Object (File)
Tue, May 12, 12:05 AM
Unknown Object (File)
Tue, May 12, 12:04 AM
Unknown Object (File)
Mon, May 11, 11:47 PM
Unknown Object (File)
Fri, May 8, 6:27 PM
Unknown Object (File)
Thu, May 7, 2:15 AM
Unknown Object (File)
Wed, May 6, 9:48 PM
Unknown Object (File)
Wed, May 6, 9:16 AM
View All 100 Files
Subscribers
farrokhi
glebius
imp
melifaro

Details

Reviewers
None
Group Reviewers
network
Commits
rG1279c260c053: pf tests: test fast port re-use with syncookies
rG2cfb60783900: pf tests: test fast port re-use with syncookies
rGdc698b2cd59e: pf tests: test fast port re-use with syncookies
Summary

When a src/dst ip/port tuple is re-used before the pf state fully
expires we clean up the state and create a new one, unless syncookies
are enabled.

Test this, by running two back-to-back nc sessions, with a fixed source
port. Move the interface and IP to a different (vnet) jail, to trick the
network stack into letting us do this.

MFC after: 1 week
Event: Aberdeen hackathon 2022

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

kp created this revision.Oct 5 2022, 4:38 PM
Herald added subscribers: glebius, melifaro, farrokhi, imp. · View Herald TranscriptOct 5 2022, 4:38 PM
kp requested review of this revision.Oct 5 2022, 4:38 PM
Harbormaster completed remote builds in B47699: Diff 111472.Oct 5 2022, 4:38 PM
kp added a comment.Oct 5 2022, 4:47 PM

Note that this tests for a bug that's not fixed yet, so it can't land until that's done.

This revision was not accepted when it landed; it landed in state Needs Review.Jan 13 2023, 10:17 AM
Closed by commit rGdc698b2cd59e: pf tests: test fast port re-use with syncookies (authored by kp). · Explain Why
This revision was automatically updated to reflect the committed changes.
kp added a commit: rGdc698b2cd59e: pf tests: test fast port re-use with syncookies.
kp added a commit: rG2cfb60783900: pf tests: test fast port re-use with syncookies.Jan 28 2023, 1:40 AM
kp added a commit: rG1279c260c053: pf tests: test fast port re-use with syncookies.

Revision Contents
Changeset List

PathSize
tests/
sys/
netpfil/
pf/
57 lines

Diff 115026

View Options

tests/sys/netpfil/pf/syncookie.sh

Loading...