]> asedeno.scripts.mit.edu Git - linux.git/commit
ipvs: add assured state for conn templates
authorJulian Anastasov <ja@ssi.bg>
Fri, 6 Jul 2018 05:25:53 +0000 (08:25 +0300)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 18 Jul 2018 09:26:40 +0000 (11:26 +0200)
commit275411430f892407b885be1de2548b2e632892c3
treef0e79459f0efcb3be42eaebfe03581b093f91d21
parentec1b28ca9674def4a158808a6493bdb87b993d81
ipvs: add assured state for conn templates

cp->state was not used for templates. Add support for state bits
and for the first "assured" bit which indicates that some
connection controlled by this template was established or assured
by the real server. In a followup patch we will use it to drop
templates under SYN attack.

Signed-off-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/net/ip_vs.h
net/netfilter/ipvs/ip_vs_proto.c
net/netfilter/ipvs/ip_vs_proto_sctp.c
net/netfilter/ipvs/ip_vs_proto_tcp.c
net/netfilter/ipvs/ip_vs_proto_udp.c
net/netfilter/ipvs/ip_vs_sync.c