Page MenuHomeFreeBSD

tcp: rate limit the sending of all RST segments
ClosedPublic

Authored by tuexen on Aug 8 2025, 10:41 AM.
Tags
None
Referenced Files
F143561151: D51815.id54425.diff
Fri, Jan 30, 10:27 PM
Unknown Object (File)
Tue, Jan 20, 11:16 PM
Unknown Object (File)
Fri, Jan 16, 9:12 PM
Unknown Object (File)
Mon, Jan 12, 10:11 AM
Unknown Object (File)
Sat, Jan 10, 4:19 PM
Unknown Object (File)
Sat, Jan 10, 4:27 AM
Unknown Object (File)
Thu, Jan 8, 9:36 PM
Unknown Object (File)
Dec 13 2025, 2:47 AM

Details

Summary

Also rate limit the sending of RST segments in the following cases:

  • when receiving data on a closed socket.
  • when a socket can not be created at the end of the handshake and the sysctl-variable net.inet.tcp.syncache.rst_on_sock_fail is 1.
  • when an ACK segment is received in SYN SENT state and it does not acknowledge the SYN segment.

After this change, there is no need anymore to provide a rstreason to tcp_dropwithreset(), since it is always BANDLIM_TCP_RST. This will be a follow-up commit, since it will change the code in a couple of places, but will not change the functionality. So the functional change can be reviewed here.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped