ipvs: add assured state for conn templates

Browse source

cp->state was not used for templates. Add support for state bits
and for the first "assured" bit which indicates that some
connection controlled by this template was established or assured
by the real server. In a followup patch we will use it to drop
templates under SYN attack.

Signed-off-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Julian Anastasov 2018-07-06 08:25:53 +03:00 • committed by Pablo Neira Ayuso

parent ec1b28ca96

commit 275411430f

6 changed files with 43 additions and 14 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

16

include/net/ip_vs.h

View file

17

net/netfilter/ipvs/ip_vs_proto.c

View file

2

net/netfilter/ipvs/ip_vs_proto_sctp.c

View file

2

net/netfilter/ipvs/ip_vs_proto_tcp.c

View file

2

net/netfilter/ipvs/ip_vs_proto_udp.c

View file

18

net/netfilter/ipvs/ip_vs_sync.c

View file