HomeFreeBSD

TCP LRO: disable mbuf queuing when packet filter hooks are in place

Description

TCP LRO: disable mbuf queuing when packet filter hooks are in place

When doing mbuf queueing, the packet filter hooks in ether_demux(),
ip_input(), and ip6_input() are by-passed. This means that the packet
filters don't process incoming packets, which might result in
connection failures. For example bypassing the TCP sequence number
validation will result in dropping valid packets.
Please note that this patch is only disabling mbuf queueing, not LRO.

Reported by: Herbert J. Skuhra
Reviewed by: glebius, rrs, rscheff
Sponsored by: Netflix, Inc.
Differential Revision: https://reviews.freebsd.org/D43769

(cherry picked from commit d1ce01214a5540db8a7e09fdf46b7ea2d06ffc48)

Details

Provenance
tuexenAuthored on Mar 8 2024, 9:03 AM
Reviewer
glebius
Differential Revision
D43769: TCP LRO: disable mbuf queuing when packet filter hooks are in place
Parents
rGbe7586fe468f: sctp: improve sending of packets containing an INIT ACK chunk
Branches
Unknown
Tags
Unknown