As per the test plan, I measured the time an openvpn server takes to complete a fixed amount of TCP connection requests.
Times are formatted in minutes:seconts test for bionic before patch: 3:26.10 test for bionic after patch: 0:02.19 test for focal before patch: 2:07.78 test for focal after patch: 0:02.17 Which shows the patch significantly improves the waiting time for part of the connection requests. I am also attaching a full reproducer set of scripts for verification. Note that this reproducer contains some interactive bits which will require user input. ** Attachment added: "reproducer.tar.gz" https://bugs.launchpad.net/ubuntu/+source/openvpn/+bug/1934781/+attachment/5514922/+files/reproducer.tar.gz ** Tags removed: verification-needed verification-needed-bionic verification-needed-focal ** Tags added: verification-done verification-done-bionic verification-done-focal -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1934781 Title: TCP socket backlog set too low ("request_sock_TCP: Possible SYN flooding on port ...") To manage notifications about this bug go to: https://bugs.launchpad.net/openvpn/+bug/1934781/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
