Searched hist:cb8d7c44d6acd4f7f6be7f8b762315260f70d896 (Results 1 – 3 of 3) sorted by relevance
| /freebsd/share/man/man4/ |
| H A D | syncache.4 | diff cb8d7c44d6acd4f7f6be7f8b762315260f70d896 Fri Mar 19 08:22:36 CET 2021 Gleb Smirnoff <glebius@FreeBSD.org> tcp_syncache: add net.inet.tcp.syncache.see_other sysctl
A security feature from c06f087ccb12 appeared to be a huge bottleneck
under SYN flood. To mitigate that add a sysctl that would make
syncache(4) globally visible, ignoring UID/GID, jail(2) and mac(4)
checks. When turned on, we won't need to call crhold() on the listening
socket credential for every incoming SYN packet.
Reviewed by: bz
|
| /freebsd/sys/netinet/ |
| H A D | tcp_syncache.h | diff cb8d7c44d6acd4f7f6be7f8b762315260f70d896 Fri Mar 19 08:22:36 CET 2021 Gleb Smirnoff <glebius@FreeBSD.org> tcp_syncache: add net.inet.tcp.syncache.see_other sysctl
A security feature from c06f087ccb12 appeared to be a huge bottleneck
under SYN flood. To mitigate that add a sysctl that would make
syncache(4) globally visible, ignoring UID/GID, jail(2) and mac(4)
checks. When turned on, we won't need to call crhold() on the listening
socket credential for every incoming SYN packet.
Reviewed by: bz
|
| H A D | tcp_syncache.c | diff cb8d7c44d6acd4f7f6be7f8b762315260f70d896 Fri Mar 19 08:22:36 CET 2021 Gleb Smirnoff <glebius@FreeBSD.org> tcp_syncache: add net.inet.tcp.syncache.see_other sysctl
A security feature from c06f087ccb12 appeared to be a huge bottleneck
under SYN flood. To mitigate that add a sysctl that would make
syncache(4) globally visible, ignoring UID/GID, jail(2) and mac(4)
checks. When turned on, we won't need to call crhold() on the listening
socket credential for every incoming SYN packet.
Reviewed by: bz
|