Files
linux/include/net
Eric Dumazet 264ea103a7 tcp: syncookies: extend validity range
Now we allow storing more request socks per listener, we might
hit syncookie mode less often and hit following bug in our stack :

When we send a burst of syncookies, then exit this mode,
tcp_synq_no_recent_overflow() can return false if the ACK packets coming
from clients are coming three seconds after the end of syncookie
episode.

This is a way too strong requirement and conflicts with rest of
syncookie code which allows ACK to be aged up to 2 minutes.

Perfectly valid ACK packets are dropped just because clients might be
in a crowded wifi environment or on another planet.

So let's fix this, and also change tcp_synq_overflow() to not
dirty a cache line for every syncookie we send, as we are under attack.

Signed-off-by: Eric Dumazet <edumazet@google.com>
Acked-by: Florian Westphal <fw@strlen.de>
Acked-by: Yuchung Cheng <ycheng@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2015-05-14 22:32:17 -04:00
..
2015-05-03 21:58:01 -04:00
2014-09-18 10:54:36 +02:00
2015-03-04 00:23:23 -05:00
2015-03-06 21:50:02 -05:00
2015-05-12 23:19:49 -04:00
2013-11-07 19:28:58 -05:00
2015-03-12 14:39:40 -04:00
2014-09-30 01:02:26 -04:00
2015-03-12 14:39:40 -04:00
2014-06-04 22:46:38 -07:00
2015-01-18 01:56:32 -05:00
2015-03-17 22:02:29 -04:00
2015-03-11 16:22:14 -04:00
2015-03-12 14:39:40 -04:00
2014-01-03 20:56:48 -05:00
2015-01-15 18:26:16 -05:00
2014-06-02 11:00:41 -07:00
2015-03-12 22:58:12 -04:00
2015-05-14 22:32:17 -04:00
2014-05-22 14:57:15 -04:00