src/sys/netinet, branch release/13.2.0FreeBSD source treehttps://cgit-dev.freebsd.org/src/atom?h=release%2F13.2.02023-03-22T15:46:43Zcarp: carp_master_down_locked() requires net epoch2023-03-22T15:46:43ZZhenlei Huangzlei@FreeBSD.org2023-03-16T10:00:13Zurn:sha1:af28d08bda99d7a841743f75d736cf677ab0ad0e
Reviewed by: kp
Approved by: re (gjb)
Fixes: 1d126e9b9474 carp: Widen epoch coverage
MFC after: 1 day
Differential Revision: https://reviews.freebsd.org/D39113
(cherry picked from commit 49cad3daf2a3abe8270f71ee5b15b8990a19529d)
(cherry picked from commit c15ceae9e7f98f7e74ff7848b3aff7176c7e263a)
carp: turn net.inet.carp.allow into a RW tunable2023-02-09T16:41:34ZBoris Lytochkinlytboris@gmail.com2023-01-29T16:42:40Zurn:sha1:0169daa1f2cd62394e7d068cbb405d64a8316bbc
Currently CARP starts announcing its state when initialised, regardless
of the state of the other services provided by the server.
As a result, the device can become master while still loading the
firewall ruleset or initialising long-starting service.
This change adds the way to request delayed CARP start by setting the
net.inet.carp.allow=0 in the loader.conf.
Differential Revision: https://reviews.freebsd.org/D38167
MFC after: 2 weeks
(cherry picked from commit ee49c5d33d93a6b10222f64a0dc16590ac2048a0)
sctp: improve delivery of stream reset notifications2023-02-06T22:20:32ZMichael Tuexentuexen@FreeBSD.org2023-02-02T13:46:10Zurn:sha1:4da78e7a355e702d5cc353f06669b6ef6f43b559
Two functions are not called via sctp_ulp_notify() and therefore
need additional checks when being called.
Reported by: syzbot+eb888d3a5a6c54413de5@syzkaller.appspotmail.com
(cherry picked from commit 7b2f1a7fe9445ea318f34bd3db971076b61ef831)
tcp: improve error handling of net.inet.tcp.udp_tunneling_port2023-02-06T22:17:09ZMichael Tuexentuexen@FreeBSD.org2023-01-26T21:55:22Zurn:sha1:6cfb1cf3c9d4cdf9bc39566f6a94bae4a60096c7
In case the new port can't be set, set the port to 0.
Sponsored by: Netflix, Inc.
(cherry picked from commit e2d14a04c5fc49ad1aab280e3c2e7283bbacc948)
BBLog: improve sysctl variables2023-02-02T00:04:30ZCheng CuiCheng.Cui@netapp.com2022-12-24T21:10:31Zurn:sha1:b5ca1cd6abad63f25b20b1081dd14069d3f7d883
Correct the format in sysctl net.inet.tcp.bb.disable_all and
sysctl net.inet.tcp.bb.log_auto_all.
Correct the format and the description in
net.inet.tcp.bb.log_auto_mode.
Reviewed by: rscheff, tuexen
Sponsored by: NetApp, Inc.
Differential Revision: https://reviews.freebsd.org/D37776
(cherry picked from commit 57cc27a3325af74553e852851d5e84e308ae79f4)
tcp: remove unused t_rttbest2023-02-02T00:02:30ZMichael Tuexentuexen@FreeBSD.org2022-11-16T10:22:13Zurn:sha1:e97522a1b7ea023961d604221eb38960fd170fa9
No functional change intended.
Reviewed by: rscheff@
Sponsored by: Netflix, Inc.
Differential Revision: https://reviews.freebsd.org/D37401
(cherry picked from commit bd4f986644b3804e19b92d39f1f90ffabff83e14)
libalias: improve handling of invalid SCTP packets2023-02-02T00:01:43ZMichael Tuexentuexen@FreeBSD.org2022-11-15T20:05:02Zurn:sha1:39844782bf1e648fa85eec40484af4d221d45fa8
In case of a paritial chunk only pretend the result is OK if
the packet is not the last fragment and there is a valid association.
PR: 267476
(cherry picked from commit 9a714376212ec1685fdc4cf254f2136a07ae6d2c)
Unbreak builds having SCTP support compiled in2023-02-02T00:01:06ZMichael Tuexentuexen@FreeBSD.org2022-11-07T07:50:51Zurn:sha1:9983b0126bbad586e7b1748719da5c8132ec3e4d
Including sctp_var.h requires INET to be defined if IPv4 support
is needed.
(cherry picked from commit 126f8248ccfee8e9252a8b449694b8619738599f)
sctp: improve sending of ABORT packets in response to INIT-ACKs2023-02-01T23:59:34ZMichael Tuexentuexen@FreeBSD.org2022-10-12T23:05:44Zurn:sha1:91a9ebe24a70f6fdb9e4f1e8d91e5ded52541f12
Ensure that the initiate tag of the INIT-ACK chunk is used as the
verification tag of the packet containing the ABORT chunk.
Reported by: Suganya Dharma
(cherry picked from commit dd36606b1bc90d1459e0d04be4ea5859d3eabb16)
tcp: improve handling of SYN-ACK segments in TIMEWAIT state2023-02-01T23:47:53ZMichael Tuexentuexen@FreeBSD.org2022-10-03T12:46:47Zurn:sha1:cd4974672ad3204ebb27efb623f3aabfcc2b82ef
Only consider segments with the SYN bit set and the ACK bit cleared
as "new connection attempts", which result in re-using a connection
being in TIMEWAIT state. This results in consistent handling of
SYN-ACK segments.
Reviewed by: rscheff@
Sponsored by: Netflix, Inc.
Differential Revision: https://reviews.freebsd.org/D36864
(cherry picked from commit 2515552e6216095c3fa61d93ee024bb8861e07c2)