netdev - Dynamic number of TCP listeners and SO

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:	Tue, 25 Mar 2014 14:41:34 +0100
From:	Yann Ylavic <ylavic.dev@...il.com>
To:	netdev@...r.kernel.org
Subject: Dynamic number of TCP listeners and SO_REUSEPORT

Hi,

while trying to modify some server's code to take advantage of the new
SO_REUSEPORT option (introduced in 3.9), I'm currently facing the
problem described in the original commit message
(https://lwn.net/Articles/542738/) :

"The TCP implementation has a problem in that the request sockets for a
listener are attached to a listener socket.  If a SYN is received, a
listener socket is chosen and request structure is created (SYN-RECV
state).  If the subsequent ack in 3WHS does not match the same port
by so_reusport, the connection state is not found (reset) and the
request structure is orphaned.  This scenario would occur when the
number of listener sockets bound to a port changes (new ones are
added, or old ones closed).  We are looking for a solution to this,
maybe allow multiple sockets to share the same request table..."

If the number of listening processes is (forcibly) made constant,
things work well and performances are really improved compared to not
using the option (accept mutex, odd scheduling...).
However this is not the model used by the server, and recycling
processes is also part of its scalability.

My tests are with the latest 3.13, but I could not find any reference
for this issue on the list since the original commit...

Is this something still being worked on, planned, or already fixed in
the latest kernel versions?

Thanks for your answers/pointers.

Regards,
Yann.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html