Page MenuHomeFreeBSD

tcp: rate limit the sending of all RST segments
ClosedPublic

Authored by tuexen on Aug 8 2025, 10:41 AM.
Tags
None
Referenced Files
Unknown Object (File)
Sun, Mar 29, 1:27 AM
Unknown Object (File)
Sat, Mar 28, 6:57 PM
Unknown Object (File)
Tue, Mar 17, 10:52 AM
Unknown Object (File)
Sun, Mar 15, 5:50 AM
Unknown Object (File)
Fri, Mar 6, 3:53 PM
Unknown Object (File)
Jan 31 2026, 11:18 AM
Unknown Object (File)
Jan 30 2026, 10:27 PM
Unknown Object (File)
Jan 20 2026, 11:16 PM

Details

Summary

Also rate limit the sending of RST segments in the following cases:

  • when receiving data on a closed socket.
  • when a socket can not be created at the end of the handshake and the sysctl-variable net.inet.tcp.syncache.rst_on_sock_fail is 1.
  • when an ACK segment is received in SYN SENT state and it does not acknowledge the SYN segment.

After this change, there is no need anymore to provide a rstreason to tcp_dropwithreset(), since it is always BANDLIM_TCP_RST. This will be a follow-up commit, since it will change the code in a couple of places, but will not change the functionality. So the functional change can be reviewed here.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped