Page MenuHomeFreeBSD

icmp6: bring rate limiting on a par with IPv4
ClosedPublic

Authored by glebius on Mar 22 2024, 9:49 PM.
Tags
None
Referenced Files
F132339902: D44482.id136166.diff
Thu, Oct 16, 1:26 AM
F132339890: D44482.id.diff
Thu, Oct 16, 1:26 AM
F132339886: D44482.id136111.diff
Thu, Oct 16, 1:26 AM
F132293122: D44482.diff
Wed, Oct 15, 2:43 PM
Unknown Object (File)
Mon, Oct 6, 5:51 AM
Unknown Object (File)
Sat, Oct 4, 6:36 PM
Unknown Object (File)
Sep 8 2025, 9:48 AM
Unknown Object (File)
Aug 14 2025, 9:00 PM

Details

Summary

Use counter_ratecheck() instead of racy and slow ppsratecheck. Use a
separate counter for every currently known type of ICMPv6. Provide logging
of ratelimit events. Provide jitter to counter open UDP port detection.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

This revision is now accepted and ready to land.Mar 23 2024, 2:23 PM
zlei added a subscriber: zlei.

Looks good to me.