Page MenuHomeFreeBSD

pf: Add counters for syncookies
ClosedPublic

Authored by kp on Aug 29 2021, 6:26 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sun, Sep 6, 6:35 PM
Unknown Object (File)
Sun, Sep 6, 10:12 AM
Unknown Object (File)
Sun, Sep 6, 2:31 AM
Unknown Object (File)
Sat, Sep 5, 7:00 AM
Unknown Object (File)
Thu, Sep 3, 12:57 AM
Unknown Object (File)
Tue, Sep 1, 4:53 AM
Unknown Object (File)
Tue, Sep 1, 1:23 AM
Unknown Object (File)
Mon, Aug 31, 12:58 PM

Details

Summary

Count when we send a syncookie, receive a valid syncookie or detect a
synflood.

MFC after: 1 week
Sponsored by: Modirum MDPay

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 41250
Build 38139: arc lint + arc unit

Event Timeline

kp requested review of this revision.Aug 29 2021, 6:26 PM
kbowling added inline comments.
sys/netpfil/pf/pf.h
165

I don't see this used anywhere, pf_synflood_check()?

sys/netpfil/pf/pf.h
165

It's not used yet. It will be when I add the adaptive mode.

This is part of a series, and getting pushed slightly out of order, because this part is done and the adaptive mode needs a little more work.

This revision is now accepted and ready to land.Aug 31 2021, 5:21 PM
This revision was automatically updated to reflect the committed changes.