netdev - [ipv6] valid_lft and active connections

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <4DF73A6D.1050809@samba.org>
Date:	Tue, 14 Jun 2011 12:39:41 +0200
From:	"Stefan (metze) Metzmacher" <metze@...ba.org>
To:	"netdev@...r.kernel.org" <netdev@...r.kernel.org>
Subject: [ipv6] valid_lft and active connections

Hi,

I have the following problem:

If I use ipv6 addresses with valid_lft != forever, the ipv6 addresses
are removed from the interface if the valid_lft expires, even if there're
established connection which use with address.

Would it be possible keep the address until the last active connection
is closed? Otherwise the usable of the privacy extensions will make
very long living tcp connections impossible.

It would be also ok to add a new special value "used" similar to "forever",
which triggers the modified behavior.

metze

Download attachment "signature.asc" of type "application/pgp-signature" (263 bytes)