Page MenuHomeFreeBSD
Differential D51797

[pfil loop prevention experiment 1/5] pf tests: Add tests for syncookies and synproxy with route-to
AcceptedPublic
Actions

Authored by vegeta_tuxpowered.net on Aug 7 2025, 4:44 PM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Oct 13, 9:05 PM
Unknown Object (File)
Sun, Oct 5, 10:35 PM
Unknown Object (File)
Fri, Sep 26, 9:56 AM
Unknown Object (File)
Sep 17 2025, 3:14 PM
Unknown Object (File)
Sep 10 2025, 4:29 AM
Unknown Object (File)
Aug 31 2025, 11:44 PM
Unknown Object (File)
Aug 26 2025, 3:39 PM
Unknown Object (File)
Aug 19 2025, 1:32 AM
View All 13 Files
Subscribers
farrokhi
glebius
imp
kp
melifaro

Details

Reviewers
kp
Summary

Syncookies and synproxy don't work with route-to. Add tests to confirm it and eventually fix it.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

vegeta_tuxpowered.net created this revision.Aug 7 2025, 4:44 PM
Herald added subscribers: glebius, melifaro, farrokhi, imp. · View Herald TranscriptAug 7 2025, 4:44 PM
vegeta_tuxpowered.net requested review of this revision.Aug 7 2025, 4:44 PM
vegeta_tuxpowered.net retitled this revision from pfil loop prevention experiment ; pf tests: Add tests for syncookies and synproxy with route-to to [pfil loop prevention experiment 1/5] pf tests: Add tests for syncookies and synproxy with route-to.
kp accepted this revision.Aug 8 2025, 9:01 AM
kp added a subscriber: kp.

Tests look good, but of course only commit them once the fix lands too.

This revision is now accepted and ready to land.Aug 8 2025, 9:01 AM
kp added a child revision: D51798: [pfil loop prevention experiment 2/5] pf tests: Add test for dummynet in pre- and post-routing scenario.Aug 8 2025, 9:34 AM

Revision Contents
Changeset List

PathSize
tests/
sys/
netpfil/
pf/
63 lines
61 lines
14 lines

Diff 159975

View Options

tests/sys/netpfil/pf/syncookie.sh

Loading...
View Options

tests/sys/netpfil/pf/synproxy.sh

Loading...
View Options

tests/sys/netpfil/pf/utils.subr

Loading...