Re: Improved TCP syncookie implementation

2006-09-14 Thread Andre Oppermann
Igor Sysoev wrote: On Thu, 14 Sep 2006, Ruslan Ermilov wrote: On Wed, Sep 13, 2006 at 10:31:43PM +0200, Andre Oppermann wrote: Igor Sysoev wrote: Well, suppose protocol similar to SSH or SMTP: 1) the client calls connect(), it sends SYN; 2) the server receives SYN and sends SYN/ACK with cook

Re: Improved TCP syncookie implementation

2006-09-14 Thread Andre Oppermann
Ruslan Ermilov wrote: On Wed, Sep 13, 2006 at 10:31:43PM +0200, Andre Oppermann wrote: Igor Sysoev wrote: Well, suppose protocol similar to SSH or SMTP: 1) the client calls connect(), it sends SYN; 2) the server receives SYN and sends SYN/ACK with cookie; 3) the client receives SYN/ACK and sen

Re: Improved TCP syncookie implementation

2006-09-14 Thread Igor Sysoev
On Thu, 14 Sep 2006, Ruslan Ermilov wrote: On Wed, Sep 13, 2006 at 10:31:43PM +0200, Andre Oppermann wrote: Igor Sysoev wrote: Well, suppose protocol similar to SSH or SMTP: 1) the client calls connect(), it sends SYN; 2) the server receives SYN and sends SYN/ACK with cookie; 3) the client re

Re: Improved TCP syncookie implementation

2006-09-14 Thread Ruslan Ermilov
On Wed, Sep 13, 2006 at 10:31:43PM +0200, Andre Oppermann wrote: > Igor Sysoev wrote: > >Well, suppose protocol similar to SSH or SMTP: > > > >1) the client calls connect(), it sends SYN; > >2) the server receives SYN and sends SYN/ACK with cookie; > >3) the client receives SYN/ACK and sends ACK; >

Re: Improved TCP syncookie implementation

2006-09-13 Thread Andre Oppermann
Igor Sysoev wrote: On Wed, 13 Sep 2006, Andre Oppermann wrote: Igor Sysoev wrote: On Sun, 3 Sep 2006, Andre Oppermann wrote: I've pretty much rewritten our implementation of TCP syncookies to get rid of some locking in TCP syncache and to improve their functionality. The RFC1323 timestamp o

Re: Improved TCP syncookie implementation

2006-09-13 Thread Igor Sysoev
On Wed, 13 Sep 2006, Andre Oppermann wrote: Igor Sysoev wrote: On Sun, 3 Sep 2006, Andre Oppermann wrote: I've pretty much rewritten our implementation of TCP syncookies to get rid of some locking in TCP syncache and to improve their functionality. The RFC1323 timestamp option is used to car

Re: Improved TCP syncookie implementation

2006-09-13 Thread Andre Oppermann
Igor Sysoev wrote: On Sun, 3 Sep 2006, Andre Oppermann wrote: I've pretty much rewritten our implementation of TCP syncookies to get rid of some locking in TCP syncache and to improve their functionality. The RFC1323 timestamp option is used to carry the full TCP SYN+SYN/ACK optional feature i

Re: Improved TCP syncookie implementation

2006-09-13 Thread Igor Sysoev
On Sun, 3 Sep 2006, Andre Oppermann wrote: I've pretty much rewritten our implementation of TCP syncookies to get rid of some locking in TCP syncache and to improve their functionality. The RFC1323 timestamp option is used to carry the full TCP SYN+SYN/ACK optional feature information. This me

Improved TCP syncookie implementation

2006-09-03 Thread Andre Oppermann
I've pretty much rewritten our implementation of TCP syncookies to get rid of some locking in TCP syncache and to improve their functionality. The RFC1323 timestamp option is used to carry the full TCP SYN+SYN/ACK optional feature information. This means that a FreeBSD host may run with syncooki