netdev - Re: [PATCH v8 bpf-next 0/6] bpf: tcp: Support arbitrary SYN Cookie at TC.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 17 Jan 2024 01:50:26 +0000
From: patchwork-bot+netdevbpf@...nel.org
To: Kuniyuki Iwashima <kuniyu@...zon.com>
Cc: edumazet@...gle.com, ast@...nel.org, daniel@...earbox.net,
 andrii@...nel.org, martin.lau@...ux.dev, pabeni@...hat.com,
 kuni1840@...il.com, bpf@...r.kernel.org, netdev@...r.kernel.org
Subject: Re: [PATCH v8 bpf-next 0/6] bpf: tcp: Support arbitrary SYN Cookie at TC.

Hello:

This series was applied to bpf/bpf-next.git (master)
by Martin KaFai Lau <martin.lau@...nel.org>:

On Mon, 15 Jan 2024 12:55:08 -0800 you wrote:
> Under SYN Flood, the TCP stack generates SYN Cookie to remain stateless
> for the connection request until a valid ACK is responded to the SYN+ACK.
> 
> The cookie contains two kinds of host-specific bits, a timestamp and
> secrets, so only can it be validated by the generator.  It means SYN
> Cookie consumes network resources between the client and the server;
> intermediate nodes must remember which nodes to route ACK for the cookie.
> 
> [...]

Here is the summary with links:
  - [v8,bpf-next,1/6] tcp: Move tcp_ns_to_ts() to tcp.h
    https://git.kernel.org/bpf/bpf-next/c/e8a7ea899527
  - [v8,bpf-next,2/6] tcp: Move skb_steal_sock() to request_sock.h
    https://git.kernel.org/bpf/bpf-next/c/2d1ee30a3b07
  - [v8,bpf-next,3/6] bpf: tcp: Handle BPF SYN Cookie in skb_steal_sock().
    https://git.kernel.org/bpf/bpf-next/c/5f8b96b9b391
  - [v8,bpf-next,4/6] bpf: tcp: Handle BPF SYN Cookie in cookie_v[46]_check().
    https://git.kernel.org/bpf/bpf-next/c/311ef79955d3
  - [v8,bpf-next,5/6] bpf: tcp: Support arbitrary SYN Cookie.
    https://git.kernel.org/bpf/bpf-next/c/b9c3eca5c086
  - [v8,bpf-next,6/6] selftest: bpf: Test bpf_sk_assign_tcp_reqsk().
    https://git.kernel.org/bpf/bpf-next/c/98af7dca1e0d

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html