Page MenuHomeFreeBSD

tcp: rate limit the sending of all RST segments
ClosedPublic

Authored by tuexen on Aug 8 2025, 10:41 AM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, May 14, 5:41 PM
Unknown Object (File)
Wed, May 13, 11:32 PM
Unknown Object (File)
Wed, May 13, 6:41 PM
Unknown Object (File)
Wed, May 13, 6:21 PM
Unknown Object (File)
Mon, May 11, 11:09 AM
Unknown Object (File)
Fri, May 8, 1:07 PM
Unknown Object (File)
Thu, Apr 30, 6:01 AM
Unknown Object (File)
Thu, Apr 30, 6:01 AM

Details

Summary

Also rate limit the sending of RST segments in the following cases:

  • when receiving data on a closed socket.
  • when a socket can not be created at the end of the handshake and the sysctl-variable net.inet.tcp.syncache.rst_on_sock_fail is 1.
  • when an ACK segment is received in SYN SENT state and it does not acknowledge the SYN segment.

After this change, there is no need anymore to provide a rstreason to tcp_dropwithreset(), since it is always BANDLIM_TCP_RST. This will be a follow-up commit, since it will change the code in a couple of places, but will not change the functionality. So the functional change can be reviewed here.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped