]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
pf: implement adaptive mode
authorKristof Provost <kp@FreeBSD.org>
Sat, 24 Jul 2021 11:59:34 +0000 (13:59 +0200)
committerKristof Provost <kp@FreeBSD.org>
Wed, 6 Oct 2021 08:46:57 +0000 (10:46 +0200)
commitd23f5f76f56d986008c49c7e74bf78e9cad63aa7
tree9286785d034a73461b4e74a064e763a44cdb2cf7
parentbea8052067be1ed2b63a75aa76a14b9d3f955868
pf: implement adaptive mode

Use atomic counters to ensure that we correctly track the number of half
open states and syncookie responses in-flight.
This determines if we activate or deactivate syncookies in adaptive
mode.

MFC after: 1 week
Sponsored by: Modirum MDPay
Differential Revision: https://reviews.freebsd.org/D32134

(cherry picked from commit bf8637181a2bb81206ff8c685f1632d07b8feb13)
sys/net/pfvar.h
sys/netpfil/pf/pf.c
sys/netpfil/pf/pf_syncookies.c