HomeFreeBSD

pf: add 'allow-related' to always allow SCTP multihome extra connections

Description

pf: add 'allow-related' to always allow SCTP multihome extra connections

Allow users to choose to allow permitted SCTP connections to set up additional
multihomed connections regardless of the ruleset. That is, allow an already
established connection to set up flows that would otherwise be disallowed.

In case of if-bound connections we initially set the extra associations to
be floating, because we don't know what path they'll be taking when they're
created. Once we see the first traffic we can bind them.

MFC after: 2 weeks
Sponsored by: Orange Business Services
Differential Revision: https://reviews.freebsd.org/D48453

Details

Provenance
kpAuthored on Thu, Jan 9, 8:28 PM
Differential Revision
D48453: pf: add 'allow-related' to always allow SCTP multihome extra connections
Parents
rG4713d2fd5663: pf: verify SCTP v_tag before updating connection state
Branches
Unknown
Tags
Unknown