summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSimon Horman <horms@verge.net.au>2011-09-29 16:14:51 +0900
committerPablo Neira Ayuso <pablo@netfilter.org>2011-11-01 09:19:41 +0100
commit325aadc8483e4fc3bbd4acfa7e471e3a032bc941 (patch)
treee62a383de40b720412f09dbdf4394660d17bd609
parentb6338b55bd2e7c51a46b23150695d821ae6626d8 (diff)
downloadop-kernel-dev-325aadc8483e4fc3bbd4acfa7e471e3a032bc941.zip
op-kernel-dev-325aadc8483e4fc3bbd4acfa7e471e3a032bc941.tar.gz
ipvs: secure_tcp does provide alternate state timeouts
Also reword the test to make it read more easily (to me) Signed-off-by: Simon Horman <horms@verge.net.au> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
-rw-r--r--Documentation/networking/ipvs-sysctl.txt10
1 files changed, 4 insertions, 6 deletions
diff --git a/Documentation/networking/ipvs-sysctl.txt b/Documentation/networking/ipvs-sysctl.txt
index 1dcdd49..13610e3 100644
--- a/Documentation/networking/ipvs-sysctl.txt
+++ b/Documentation/networking/ipvs-sysctl.txt
@@ -140,13 +140,11 @@ nat_icmp_send - BOOLEAN
secure_tcp - INTEGER
0 - disabled (default)
- The secure_tcp defense is to use a more complicated state
- transition table and some possible short timeouts of each
- state. In the VS/NAT, it delays the entering the ESTABLISHED
- until the real server starts to send data and ACK packet
- (after 3-way handshake).
+ The secure_tcp defense is to use a more complicated TCP state
+ transition table. For VS/NAT, it also delays entering the
+ TCP ESTABLISHED state until the three way handshake is completed.
- The value definition is the same as that of drop_entry or
+ The value definition is the same as that of drop_entry and
drop_packet.
sync_threshold - INTEGER
OpenPOWER on IntegriCloud