iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/net/ipv4
History
Eric Dumazet 79e3602caa tcp: make global challenge ack rate limitation per net-ns and default disabled 
Because per host rate limiting has been proven problematic (side channel
attacks can be based on it), per host rate limiting of challenge acks ideally
should be per netns and turned off by default.

This is a long due followup of following commits:

083ae308280d ("tcp: enable per-socket rate limiting of all 'challenge acks'")
f2b2c582e824 ("tcp: mitigate ACK loops for connections as tcp_sock")
75ff39ccc1bd ("tcp: make challenge acks less predictable")

Signed-off-by: Eric Dumazet <edumazet@google.com>
Cc: Jason Baron <jbaron@akamai.com>
Acked-by: Neal Cardwell <ncardwell@google.com>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
2022-08-31 19:56:48 -07:00
..
bpfilter
net: Revert "net: optimize the sockptr_t for unified kernel/user address spaces"
2020-08-10 12:06:44 -07:00
netfilter
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2022-07-21 13:03:39 -07:00
af_inet.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2022-07-21 13:03:39 -07:00
ah4.c
net: ipv4: fix clang -Wformat warnings
2022-07-12 12:58:53 +02:00
arp.c
net: ipv4: new arp_accept option to accept garp only if in-network
2022-07-15 18:55:49 -07:00
bpf_tcp_ca.c
bpf: Switch to new kfunc flags infrastructure
2022-07-21 20:59:42 -07:00
cipso_ipv4.c
cipso: Fix data-races around sysctl.
2022-07-08 12:10:33 +01:00
datagram.c
ipv4: Avoid using RTO_ONLINK with ip_route_connect().
2022-04-22 13:06:03 +01:00
devinet.c
net: Fix data-races around sysctl_devconf_inherit_init_net.
2022-08-24 13:46:58 +01:00
esp4_offload.c
net: Fix esp GSO on inter address family tunnels.
2022-03-07 13:14:04 +01:00
esp4.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2022-07-21 13:03:39 -07:00
fib_frontend.c
ip: fix triggering of 'icmp redirect'
2022-08-31 19:50:36 -07:00
fib_lookup.h
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2022-02-17 11:44:20 -08:00
fib_notifier.c
net: ipv4: remove superfluous header files from fib_notifier.c
2021-09-28 17:32:56 -07:00
fib_rules.c
ipv4: remove unnecessary type castings
2022-04-30 15:12:58 +01:00
fib_semantics.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2022-07-21 13:03:39 -07:00
fib_trie.c
ipv4: Fix data-races around sysctl_fib_notify_on_flag_change.
2022-07-25 12:42:10 +01:00
fou.c
fou: Remove XRFM from NET_FOU Kconfig
2022-04-12 14:56:33 -07:00
gre_demux.c
net: Remove the member netns_ok
2021-05-17 15:29:35 -07:00
gre_offload.c
gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers
2021-11-24 17:21:42 -08:00
icmp.c
ip: Fix data-races around sysctl_ip_no_pmtu_disc.
2022-07-15 11:49:55 +01:00
igmp.c
igmp: Fix data-races around sysctl_igmp_qrv.
2022-07-18 12:21:54 +01:00
inet_connection_sock.c
tcp: Fix data-races around sysctl_tcp_syn(ack)?_retries.
2022-07-18 12:21:54 +01:00
inet_diag.c
net: inet: Retire port only listening_hash
2022-05-12 16:52:18 -07:00
inet_fragment.c
ipv4: remove unnecessary type castings
2022-04-30 15:12:58 +01:00
inet_hashtables.c
Revert "net: Add a second bind table hashed by port and address"
2022-06-16 11:07:59 -07:00
inet_timewait_sock.c
tcp: Fix a data-race around sysctl_max_tw_buckets.
2022-07-13 12:56:49 +01:00
inetpeer.c
inetpeer: Fix data-races around sysctl.
2022-07-08 12:10:33 +01:00
ip_forward.c
ip: Fix data-races around sysctl_ip_fwd_update_priority.
2022-07-15 11:49:55 +01:00
ip_fragment.c
net: ip: Handle delivery_time in ip defrag
2022-03-03 14:38:48 +00:00
ip_gre.c
ip_tunnel: Respect tunnel key's "flow_flags" in IP tunnels
2022-08-18 21:18:28 +02:00
ip_input.c
tcp/udp: Make early_demux back namespacified.
2022-07-15 18:50:35 -07:00
ip_options.c
ipv4: drop fragmentation code from ip_options_build()
2022-01-29 17:53:07 +00:00
ip_output.c
net: Fix data-races around sysctl_[rw]mem_(max|default).
2022-08-24 13:46:57 +01:00
ip_sockglue.c
net: Fix data-races around sysctl_optmem_max.
2022-08-24 13:46:57 +01:00
ip_tunnel_core.c
tunnels: do not assume mac header is set in skb_tunnel_check_pmtu()
2022-06-27 11:50:30 +01:00
ip_tunnel.c
ip_tunnel: Respect tunnel key's "flow_flags" in IP tunnels
2022-08-18 21:18:28 +02:00
ip_vti.c
ip: use dev_addr_set() in tunnels
2021-10-13 09:41:37 -07:00
ipcomp.c
Networking changes for 5.14.
2021-06-30 15:51:09 -07:00
ipconfig.c
Driver core / kernfs changes for 6.0-rc1
2022-08-04 11:31:20 -07:00
ipip.c
ip: use dev_addr_set() in tunnels
2021-10-13 09:41:37 -07:00
ipmr_base.c
ipmr: adopt rcu_read_lock() in mr_dump()
2022-06-24 11:34:38 +01:00
ipmr.c
ipmr: fix a lockdep splat in ipmr_rtm_dumplink()
2022-06-27 12:01:01 +01:00
Kconfig
fou: Remove XRFM from NET_FOU Kconfig
2022-04-12 14:56:33 -07:00
Makefile
bpf: Clean up sockmap related Kconfigs
2021-02-26 12:28:03 -08:00
metrics.c
treewide: rename nla_strlcpy to nla_strscpy.
2020-11-16 08:08:54 -08:00
netfilter.c
netfilter: Use l3mdev flow key when re-routing mangled packets
2022-05-16 13:03:29 +02:00
netlink.c
…
nexthop.c
nexthop: Fix data-races around nexthop_compat_mode.
2022-07-13 12:56:50 +01:00
ping.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2022-06-23 12:33:24 -07:00
proc.c
ip: Fix data-races around sysctl_ip_default_ttl.
2022-07-15 11:49:55 +01:00
protocol.c
net: Remove the member netns_ok
2021-05-17 15:29:35 -07:00
raw_diag.c
raw: complete rcu conversion
2022-06-21 11:38:29 +02:00
raw.c
raw: fix a typo in raw_icmp_error()
2022-06-24 22:48:33 -07:00
route.c
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next
2022-07-25 13:25:39 +01:00
syncookies.c
tcp: Fix data-races around sysctl knobs related to SYN option.
2022-07-20 10:14:49 +01:00
sysctl_net_ipv4.c
ip: Fix data-races around sysctl_ip_prot_sock.
2022-07-20 10:14:49 +01:00
tcp_bbr.c
bpf: Switch to new kfunc flags infrastructure
2022-07-21 20:59:42 -07:00
tcp_bic.c
tcp: add accessors to read/set tp->snd_cwnd
2022-04-06 12:05:41 -07:00
tcp_bpf.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2022-06-23 12:33:24 -07:00
tcp_cdg.c
tcp: add accessors to read/set tp->snd_cwnd
2022-04-06 12:05:41 -07:00
tcp_cong.c
tcp: Add tracepoint for tcp_set_ca_state
2022-04-07 20:33:15 -07:00
tcp_cubic.c
bpf: Switch to new kfunc flags infrastructure
2022-07-21 20:59:42 -07:00
tcp_dctcp.c
bpf: Switch to new kfunc flags infrastructure
2022-07-21 20:59:42 -07:00
tcp_dctcp.h
…
tcp_diag.c
…
tcp_fastopen.c
tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout.
2022-07-18 12:21:54 +01:00
tcp_highspeed.c
tcp: add accessors to read/set tp->snd_cwnd
2022-04-06 12:05:41 -07:00
tcp_htcp.c
tcp: add accessors to read/set tp->snd_cwnd
2022-04-06 12:05:41 -07:00
tcp_hybla.c
tcp: add accessors to read/set tp->snd_cwnd
2022-04-06 12:05:41 -07:00
tcp_illinois.c
tcp: add accessors to read/set tp->snd_cwnd
2022-04-06 12:05:41 -07:00
tcp_input.c
tcp: make global challenge ack rate limitation per net-ns and default disabled
2022-08-31 19:56:48 -07:00
tcp_ipv4.c
tcp: make global challenge ack rate limitation per net-ns and default disabled
2022-08-31 19:56:48 -07:00
tcp_lp.c
tcp: add accessors to read/set tp->snd_cwnd
2022-04-06 12:05:41 -07:00
tcp_metrics.c
tcp: Fix data-races around sysctl_tcp_no_ssthresh_metrics_save.
2022-07-22 12:06:17 +01:00
tcp_minisocks.c
tcp: Fix a data-race around sysctl_tcp_abort_on_overflow.
2022-07-20 10:14:50 +01:00
tcp_nv.c
tcp: add accessors to read/set tp->snd_cwnd
2022-04-06 12:05:41 -07:00
tcp_offload.c
net: move gro definitions to include/net/gro.h
2021-11-16 13:16:54 +00:00
tcp_output.c
net: Fix data-races around sysctl_[rw]mem_(max|default).
2022-08-24 13:46:57 +01:00
tcp_rate.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2022-04-28 13:02:01 -07:00
tcp_recovery.c
tcp: Fix data-races around sysctl_tcp_recovery.
2022-07-20 10:14:50 +01:00
tcp_scalable.c
tcp: add accessors to read/set tp->snd_cwnd
2022-04-06 12:05:41 -07:00
tcp_timer.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2022-07-21 13:03:39 -07:00
tcp_ulp.c
…
tcp_vegas.c
tcp: add accessors to read/set tp->snd_cwnd
2022-04-06 12:05:41 -07:00
tcp_vegas.h
…
tcp_veno.c
tcp: add accessors to read/set tp->snd_cwnd
2022-04-06 12:05:41 -07:00
tcp_westwood.c
tcp: add accessors to read/set tp->snd_cwnd
2022-04-06 12:05:41 -07:00
tcp_yeah.c
tcp: add accessors to read/set tp->snd_cwnd
2022-04-06 12:05:41 -07:00
tcp.c
net: Fix data-races around sysctl_max_skb_frags.
2022-08-24 13:46:58 +01:00
tunnel4.c
net: Remove the member netns_ok
2021-05-17 15:29:35 -07:00
udp_bpf.c
net: remove noblock parameter from recvmsg() entities
2022-04-12 15:00:25 +02:00
udp_diag.c
net: Use nlmsg_unicast() instead of netlink_unicast()
2021-07-13 09:28:29 -07:00
udp_impl.h
net: remove noblock parameter from recvmsg() entities
2022-04-12 15:00:25 +02:00
udp_offload.c
gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers
2021-11-24 17:21:42 -08:00
udp_tunnel_core.c
net/ipv4/udp_tunnel_core.c: remove superfluous header files from udp_tunnel_core.c
2021-09-21 10:17:20 +01:00
udp_tunnel_nic.c
udp_tunnel: Fix end of loop test in udp_tunnel_nic_unregister()
2022-02-23 12:35:00 +00:00
udp_tunnel_stub.c
udp_tunnel: add central NIC RX port offload infrastructure
2020-07-10 13:54:00 -07:00
udp.c
udp: Remove redundant __udp_sysctl_init() call from udp_init().
2022-08-01 12:07:53 +01:00
udplite.c
net: add per_cpu_fw_alloc field to struct proto
2022-06-10 16:21:26 -07:00
xfrm4_input.c
…
xfrm4_output.c
…
xfrm4_policy.c
net: rename reference+tracking helpers
2022-06-09 21:52:55 -07:00
xfrm4_protocol.c
net: xfrm: unexport __init-annotated xfrm4_protocol_init()
2022-06-08 10:10:13 -07:00
xfrm4_state.c
…
xfrm4_tunnel.c
net/ipv4/xfrm4_tunnel.c: remove superfluous header files from xfrm4_tunnel.c
2021-09-23 10:10:00 +02:00