+ SCTP_CONNTRACK_OPEN_WAIT = SCTP_CONNTRACK_COOKIE_WAIT,ĭiff -git a/include/uapi/linux/netfilter/nfnetlink_cttimeout.h b/include/uapi/linux/netfilter/nfnetlink_cttimeout.h a/include/uapi/linux/netfilter/nf_conntrack_sctp.h Net/netfilter/nf_conntrack_standalone.c | 72 +-Ĥ files changed, 179 insertions(+), 519 deletions(-)ĭiff -git a/include/uapi/linux/netfilter/nf_conntrack_sctp.h b/include/uapi/linux/netfilter/nf_conntrack_sctp.h Net/netfilter/nf_conntrack_proto_sctp.c | 624 +++++. linux/netfilter/nfnetlink_cttimeout.h | 1 + uapi/linux/netfilter/nf_conntrack_sctp.h | 1 + sctp_vtag_check() does all vtag related check, except for
sctp_new() brought back for unconfirmed CT entries ASSURED bit is NOT set in this version of the patch, need help Information on the chunks present in the packet SCTP chunks are parsed only once, and a map is populated with the VTAG checks are kept as is (can be moved to a conntrack extension if Timeout is used to clean up conntrack entries Multihomed since the endpoints could use different paths in the networkĮSTABLISHED: 210 seconds (rto_max + hb_interval * path_max_retrans) Stateful approach to SCTP is difficult when the association is Proposes a simple state machine with only two states OPEN_WAIT andĮSTABLISHED (similar to UDP).
Long Xin, Claudio Porfiri, Sriram YagnaramanĪll the paths in an SCTP connection are kept alive either by actualĭATA/SACK running through the connection or by HEARTBEAT. ` (2 more replies) 0 siblings, 3 replies 4+ messages in threadįrom: Sriram Yagnaraman 11:47 UTC ( / raw)Ĭc: Florian Westphal, Pablo Neira Ayuso, Marcelo Ricardo Leitner, Netfilter: conntrack: simplify sctp state machine All of help / color / mirror / Atom feed * netfilter: conntrack: simplify sctp state machine 11:47 Sriram Yagnaraman
0 kommentar(er)
