HomeFreeBSD

Lower the default limits on the IPv4 reassembly queue.

Description

Lower the default limits on the IPv4 reassembly queue.

In particular, try to ensure that no bucket will have a reassembly
queue larger than approximately 100 items. This limits the cost to
find the correct reassembly queue when processing an incoming
fragment.

Due to the low limits on each bucket's length, increase the size of
the hash table from 64 to 1024.

Reviewed by: jhb
Security: FreeBSD-SA-18:10.ip
Security: CVE-2018-6923

Details

Provenance
jtlAuthored on
Reviewer
jhb
Parents
rS337785: Provide part of the mitigation for L1TF-VMM.
Branches
Unknown
Tags
Unknown