d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

pf: clean up syncookie callout on vnet shutdown

Browse Source 
Ensure that we cancel any outstanding callouts for syncookies when we
terminate the vnet.

MFC after:	1 week
Sponsored by:	Modirum MDPay
This commit is contained in:
Kristof Provost 2021-07-20 21:03:08 +02:00
parent 84db87b8da
commit 32271c4d38
3 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
sys/net/pfvar.h
View File

@ -1852,6 +1852,7 @@ void pf_send_tcp(const struct pf_krule *, sa_family_t,
u_int16_t);
void pf_syncookies_init(void);
void pf_syncookies_cleanup(void);
int pf_get_syncookies(struct pfioc_nv *);
int pf_set_syncookies(struct pfioc_nv *);
int pf_synflood_check(struct pf_pdesc *);

1
sys/netpfil/pf/pf_ioctl.c
View File

@ -5573,6 +5573,7 @@ pf_unload_vnet(void)
dehook_pf();
PF_RULES_WLOCK();
pf_syncookies_cleanup();
shutdown_pf();
PF_RULES_WUNLOCK();

6
sys/netpfil/pf/pf_syncookies.c
View File

@ -127,6 +127,12 @@ pf_syncookies_init(void)
PF_RULES_WUNLOCK();
}
void
pf_syncookies_cleanup(void)
{
callout_stop(&V_pf_syncookie_status.keytimeout);
}
int
pf_get_syncookies(struct pfioc_nv *nv)
{