diff options
| author | silby <silby@FreeBSD.org> | 2005-01-02 01:50:57 +0000 |
|---|---|---|
| committer | silby <silby@FreeBSD.org> | 2005-01-02 01:50:57 +0000 |
| commit | c79cd91efc05ca91a24c2adea62738a1e660528a (patch) | |
| tree | d32dcba0ed701ac7af89b0ca15a86f9f0c2cf9ad /sys/netinet/in_pcb.h | |
| parent | 6bfe519bf0d785388af7342b991f57aba1332cca (diff) | |
| download | FreeBSD-src-c79cd91efc05ca91a24c2adea62738a1e660528a.zip FreeBSD-src-c79cd91efc05ca91a24c2adea62738a1e660528a.tar.gz | |
Port randomization leads to extremely fast port reuse at high
connection rates, which is causing problems for some users.
To retain the security advantage of random ports and ensure
correct operation for high connection rate users, disable
port randomization during periods of high connection rates.
Whenever the connection rate exceeds randomcps (10 by default),
randomization will be disabled for randomtime (45 by default)
seconds. These thresholds may be tuned via sysctl.
Many thanks to Igor Sysoev, who proved the necessity of this
change and tested many preliminary versions of the patch.
MFC After: 20 seconds
Diffstat (limited to 'sys/netinet/in_pcb.h')
| -rw-r--r-- | sys/netinet/in_pcb.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/sys/netinet/in_pcb.h b/sys/netinet/in_pcb.h index 2e8228e..6983480 100644 --- a/sys/netinet/in_pcb.h +++ b/sys/netinet/in_pcb.h @@ -333,6 +333,7 @@ extern int ipport_firstauto; extern int ipport_lastauto; extern int ipport_hifirstauto; extern int ipport_hilastauto; +extern struct callout ipport_tick_callout; void in_pcbpurgeif0(struct inpcbinfo *, struct ifnet *); int in_pcballoc(struct socket *, struct inpcbinfo *, const char *); @@ -362,6 +363,7 @@ struct sockaddr * in_sockaddr(in_port_t port, struct in_addr *addr); void in_pcbsosetlabel(struct socket *so); void in_pcbremlists(struct inpcb *inp); +void ipport_tick(void *xtp); #endif /* _KERNEL */ #endif /* !_NETINET_IN_PCB_H_ */ |
