Page MenuHomeFreeBSD

icmp6: bring rate limiting on a par with IPv4
ClosedPublic

Authored by glebius on Mar 22 2024, 9:49 PM.
Tags
None
Referenced Files
F115637987: D44482.id136111.diff
Sat, Apr 26, 9:20 AM
Unknown Object (File)
Tue, Apr 22, 1:52 PM
Unknown Object (File)
Tue, Apr 22, 6:00 AM
Unknown Object (File)
Sat, Apr 19, 12:24 AM
Unknown Object (File)
Feb 19 2025, 3:38 AM
Unknown Object (File)
Feb 19 2025, 3:12 AM
Unknown Object (File)
Feb 14 2025, 1:11 AM
Unknown Object (File)
Feb 12 2025, 2:04 PM

Details

Summary

Use counter_ratecheck() instead of racy and slow ppsratecheck. Use a
separate counter for every currently known type of ICMPv6. Provide logging
of ratelimit events. Provide jitter to counter open UDP port detection.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

This revision is now accepted and ready to land.Mar 23 2024, 2:23 PM
zlei added a subscriber: zlei.

Looks good to me.