Page MenuHomeFreeBSD
Differential D36886

pf tests: test fast port re-use with syncookies
ClosedPublic
Actions

Authored by kp on Oct 5 2022, 4:38 PM.
Tags
None
Referenced Files
Unknown Object (File)
Wed, Sep 18, 3:05 AM
Unknown Object (File)
Tue, Sep 17, 3:29 AM
Unknown Object (File)
Mon, Sep 16, 7:43 AM
Unknown Object (File)
Sun, Sep 15, 5:05 PM
Unknown Object (File)
Tue, Sep 10, 5:11 PM
Unknown Object (File)
Sat, Sep 7, 11:48 PM
Unknown Object (File)
Mon, Sep 2, 8:07 AM
Unknown Object (File)
Sun, Sep 1, 7:28 AM
View All 31 Files
Subscribers
farrokhi
glebius
imp
melifaro

Details

Reviewers
None
Group Reviewers
network
Commits
rG1279c260c053: pf tests: test fast port re-use with syncookies
rG2cfb60783900: pf tests: test fast port re-use with syncookies
rGdc698b2cd59e: pf tests: test fast port re-use with syncookies
Summary

When a src/dst ip/port tuple is re-used before the pf state fully
expires we clean up the state and create a new one, unless syncookies
are enabled.

Test this, by running two back-to-back nc sessions, with a fixed source
port. Move the interface and IP to a different (vnet) jail, to trick the
network stack into letting us do this.

MFC after: 1 week
Event: Aberdeen hackathon 2022

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

kp created this revision.Oct 5 2022, 4:38 PM
Herald added subscribers: glebius, melifaro, farrokhi, imp. · View Herald TranscriptOct 5 2022, 4:38 PM
kp requested review of this revision.Oct 5 2022, 4:38 PM
Harbormaster completed remote builds in B47699: Diff 111472.Oct 5 2022, 4:38 PM
kp added a comment.Oct 5 2022, 4:47 PM

Note that this tests for a bug that's not fixed yet, so it can't land until that's done.

This revision was not accepted when it landed; it landed in state Needs Review.Jan 13 2023, 10:17 AM
Closed by commit rGdc698b2cd59e: pf tests: test fast port re-use with syncookies (authored by kp). · Explain Why
This revision was automatically updated to reflect the committed changes.
kp added a commit: rGdc698b2cd59e: pf tests: test fast port re-use with syncookies.
kp added a commit: rG2cfb60783900: pf tests: test fast port re-use with syncookies.Jan 28 2023, 1:40 AM
kp added a commit: rG1279c260c053: pf tests: test fast port re-use with syncookies.

Revision Contents
Changeset List

PathSize
tests/
sys/
netpfil/
pf/
57 lines

Diff 115026

View Options

tests/sys/netpfil/pf/syncookie.sh

Loading...