Page MenuHomeFreeBSD

icmp6: bring rate limiting on a par with IPv4
ClosedPublic

Authored by glebius on Mar 22 2024, 9:49 PM.
Tags
None
Referenced Files
F110131172: D44482.diff
Fri, Feb 14, 1:11 AM
Unknown Object (File)
Wed, Feb 12, 2:04 PM
Unknown Object (File)
Wed, Feb 12, 2:03 PM
Unknown Object (File)
Tue, Feb 4, 12:07 PM
Unknown Object (File)
Sat, Jan 25, 1:56 AM
Unknown Object (File)
Fri, Jan 24, 12:14 AM
Unknown Object (File)
Jan 10 2025, 1:21 AM
Unknown Object (File)
Jan 9 2025, 3:07 PM

Details

Summary

Use counter_ratecheck() instead of racy and slow ppsratecheck. Use a
separate counter for every currently known type of ICMPv6. Provide logging
of ratelimit events. Provide jitter to counter open UDP port detection.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

This revision is now accepted and ready to land.Mar 23 2024, 2:23 PM
zlei added a subscriber: zlei.

Looks good to me.