Page MenuHomeFreeBSD

tcp: rate limit the sending of all RST segments
ClosedPublic

Authored by tuexen on Aug 8 2025, 10:41 AM.
Tags
None
Referenced Files
Unknown Object (File)
Sun, Jun 14, 6:14 AM
Unknown Object (File)
Mon, Jun 8, 11:26 PM
Unknown Object (File)
Sun, May 31, 5:03 PM
Unknown Object (File)
Sun, May 31, 2:22 PM
Unknown Object (File)
May 14 2026, 5:41 PM
Unknown Object (File)
May 13 2026, 11:32 PM
Unknown Object (File)
May 13 2026, 6:41 PM
Unknown Object (File)
May 13 2026, 6:21 PM

Details

Summary

Also rate limit the sending of RST segments in the following cases:

  • when receiving data on a closed socket.
  • when a socket can not be created at the end of the handshake and the sysctl-variable net.inet.tcp.syncache.rst_on_sock_fail is 1.
  • when an ACK segment is received in SYN SENT state and it does not acknowledge the SYN segment.

After this change, there is no need anymore to provide a rstreason to tcp_dropwithreset(), since it is always BANDLIM_TCP_RST. This will be a follow-up commit, since it will change the code in a couple of places, but will not change the functionality. So the functional change can be reviewed here.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped