Page MenuHomeFreeBSD
Differential D51797

[pfil loop prevention experiment 1/5] pf tests: Add tests for syncookies and synproxy with route-to
AcceptedPublic
Actions

Authored by vegeta_tuxpowered.net on Aug 7 2025, 4:44 PM.
Tags
None
Referenced Files
F160270251: D51797.id.diff
Mon, Jun 22, 6:44 PM
Unknown Object (File)
Mon, Jun 22, 3:17 AM
Unknown Object (File)
Sat, Jun 20, 12:42 AM
Unknown Object (File)
Tue, Jun 16, 12:56 PM
Unknown Object (File)
Tue, Jun 16, 11:46 AM
Unknown Object (File)
Fri, Jun 5, 10:52 AM
Unknown Object (File)
Thu, Jun 4, 2:09 PM
Unknown Object (File)
Sun, May 31, 1:28 AM
View All 51 Files
Subscribers
farrokhi
glebius
imp
kp
melifaro

Details

Reviewers
kp
Summary

Syncookies and synproxy don't work with route-to. Add tests to confirm it and eventually fix it.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

vegeta_tuxpowered.net created this revision.Aug 7 2025, 4:44 PM
Herald added subscribers: glebius, melifaro, farrokhi, imp. · View Herald TranscriptAug 7 2025, 4:44 PM
vegeta_tuxpowered.net requested review of this revision.Aug 7 2025, 4:44 PM
vegeta_tuxpowered.net retitled this revision from pfil loop prevention experiment ; pf tests: Add tests for syncookies and synproxy with route-to to [pfil loop prevention experiment 1/5] pf tests: Add tests for syncookies and synproxy with route-to.
kp accepted this revision.Aug 8 2025, 9:01 AM
kp added a subscriber: kp.

Tests look good, but of course only commit them once the fix lands too.

This revision is now accepted and ready to land.Aug 8 2025, 9:01 AM
kp added a child revision: D51798: [pfil loop prevention experiment 2/5] pf tests: Add test for dummynet in pre- and post-routing scenario.Aug 8 2025, 9:34 AM

Revision Contents
Changeset List

PathSize
tests/
sys/
netpfil/
pf/
63 lines
61 lines
14 lines

Diff 159975

View Options

tests/sys/netpfil/pf/syncookie.sh

Loading...
View Options

tests/sys/netpfil/pf/synproxy.sh

Loading...
View Options

tests/sys/netpfil/pf/utils.subr

Loading...