Commit Graph

9 Commits

Author SHA1 Message Date
Gleb Smirnoff
77a84a305e syncache.4: fix mandoc in cb8d7c44d6
Noticed by:	brueffer
2021-04-15 15:50:01 -07:00
Gleb Smirnoff
cb8d7c44d6 tcp_syncache: add net.inet.tcp.syncache.see_other sysctl
A security feature from c06f087ccb appeared to be a huge bottleneck
under SYN flood. To mitigate that add a sysctl that would make
syncache(4) globally visible, ignoring UID/GID, jail(2) and mac(4)
checks. When turned on, we won't need to call crhold() on the listening
socket credential for every incoming SYN packet.

Reviewed by:	bz
2021-04-15 15:26:48 -07:00
Baptiste Daroussin
6c89995002 use .Mt to mark up email addresses consistently (final part)
PR:		191174
Submitted by:	Franco Fichtner <franco at lastsummer.de>
2014-06-26 21:46:14 +00:00
Tom Rhodes
7620300a17 Correct a typo.
Noticed by:	ru
2008-01-22 19:16:09 +00:00
Tom Rhodes
771553b905 Document net.inet.tcp.syncookies_only using a description taken from
tcp_syncache.c revision 1.99 of andre's commit log.

PR:	107611
2008-01-22 18:35:23 +00:00
Ruslan Ermilov
e61e13b2ab The default of 3 retransmits corresponds to a timeout value of
45 seconds, not 15.
2007-12-19 16:58:54 +00:00
Christian Brueffer
4548510be1 Fix typo.
PR:		95620
Submitted by:	Stephane Bortzmeyer <bortzmeyer@nic.fr>
MFC after:	3 days
2006-04-11 15:30:13 +00:00
Gleb Smirnoff
88cd456676 Remove all references to T/TCP, which was removed several months ago.
Approved by:	andre
2005-08-25 13:47:41 +00:00
Ruslan Ermilov
298aa4e5fa Added the syncache(4) manpage.
Submitted by:	jlemon
2002-11-23 19:43:44 +00:00