Re: BBR Congestion Control Algorithm

2016-09-20 Thread Loganaden Velvindron
On Sat, Sep 17, 2016 at 7:24 PM, Babak Farrokhi wrote: > ICYMI: http://marc.info/?l=linux-netdev&m=147405177724268&w=2 > > Google submitted their own TCP CC algorithm to upstream. This algorithm has > been widely in use in their network. > This looks very interesting and it would be great if some

Re: [oss-security] CVE Request : IPv6 Hop limit lowering via RA messages

2015-04-03 Thread Loganaden Velvindron
On Fri, Apr 3, 2015 at 1:54 PM, D.S. Ljungmark wrote: > On Fri, Apr 3, 2015 at 6:06 AM, Jim Thompson wrote: >> have you considered that there might not be a relevant patch because >> FreeBSD’s implementation isn’t affected? > > sys/netinet6/nd6_rtr.c > > 300 if (nd_ra->nd_ra_curhopli

Re: VIMAGE + pf security fix?

2014-11-21 Thread Loganaden Velvindron
On Fri, Nov 21, 2014 at 10:52:05AM +, Bjoern A. Zeeb wrote: > > On 21 Nov 2014, at 08:06 , Craig Rodrigues wrote: > > > On Thu, Nov 20, 2014 at 10:07 AM, Craig Rodrigues > > wrote: > > > >> On Wed, Nov 19, 2014 at 6:05 AM, Bjoern A. Zeeb wrote: > >> > >>> > >>> For people to use pf with

Re: IPv6 nodeinfo default behaviour

2014-07-22 Thread Loganaden Velvindron
On Tue, Jul 22, 2014 at 11:25:37AM -0700, wrote: > At Tue, 22 Jul 2014 10:01:50 -0700, > Loganaden Velvindron wrote: > > > > > Security Considerations > > > > > > > >This protocol has the potential of revealing information useful to a > &

Re: IPv6 nodeinfo default behaviour

2014-07-22 Thread Loganaden Velvindron
On Tue, Jul 22, 2014 at 09:53:13AM -0700, wrote: > At Sun, 20 Jul 2014 02:04:10 -0700, > Loganaden Velvindron wrote: > > > Security Considerations > > > >This protocol shares the security issues of ICMPv6 that are > >documented in the "

IPv6 nodeinfo default behaviour

2014-07-20 Thread Loganaden Velvindron
Hi guys, OpenBSD recently removed support for RFC 4620 from their kernel completely. The default value is 3 in FreeBSD. According to the RFC: Security Considerations This protocol shares the security issues of ICMPv6 that are documented in the "Security Considerations" section of [5].

mbuf leakage fix

2013-10-04 Thread Loganaden Velvindron
Hi, >From netbsd. Index: ip6_mroute.c === --- ip6_mroute.c(revision 255947) +++ ip6_mroute.c(working copy) @@ -616,7 +616,7 @@ for (rte = rt->mf6c_stall; rte != NULL; ) {

Re: Improved SYN Cookies: Looking for testers

2013-07-16 Thread Loganaden Velvindron
On Thu, Jul 11, 2013 at 10:36:22AM +0200, Andre Oppermann wrote: > On 10.07.2013 15:18, Fabian Keil wrote: > >Andre Oppermann wrote: > > > >>We have a SYN cookie implementation for quite some time now but it > >>has some limitations with current realities for window scaling and > >>SACK encoding t

FreeBSD equivalent of rt_timer_count()

2013-07-02 Thread Loganaden Velvindron
Hi, I'm interested in implementing something like rt_timer_count() See: http://fxr.watson.org/fxr/source/net/route.c?v=NETBSD;im=bigexcerpts#L1121 Maybe freebsd has something similar ? //logan C-x-C-c ___ freebsd-net@freebsd.org mailing list http://li

Re: kern/157410: [ip6] IPv6 Router Advertisements Cause Excessive CPU Use

2013-07-01 Thread Loganaden Velvindron
On Mon, Jul 01, 2013 at 12:58:23PM -0700, Loganaden Velvindron wrote: > Hi I came across this old PR. It appears that it's not fixed in -current. > > I attempted to port the diff to our FreeBSD 9.1 release machines which > have IPv6 connectivity and are affected by RA flooding.

kern/157410: [ip6] IPv6 Router Advertisements Cause Excessive CPU Use

2013-07-01 Thread Loganaden Velvindron
Hi I came across this old PR. It appears that it's not fixed in -current. I attempted to port the diff to our FreeBSD 9.1 release machines which have IPv6 connectivity and are affected by RA flooding. I can report that it mitigates RA_flooding. Feedback welcomed. I'd be happy to polish it so tha