armbian/linux-rockchip
0
0
Fork 0
mirror of https://github.com/armbian/linux-rockchip.git synced 2026-01-06 11:08:10 -08:00
Code Issues Packages Projects Releases Wiki Activity
Files
c0c58a52d782b41be48985a983c2feb39b130eb7
linux-rockchip/include/net
History
Eric Dumazet 997ba88896 icmp: change the order of rate limits 
commit 8c2bd38b95f75f3d2a08c93e35303e26d480d24e upstream.

ICMP messages are ratelimited :

After the blamed commits, the two rate limiters are applied in this order:

1) host wide ratelimit (icmp_global_allow())

2) Per destination ratelimit (inetpeer based)

In order to avoid side-channels attacks, we need to apply
the per destination check first.

This patch makes the following change :

1) icmp_global_allow() checks if the host wide limit is reached.
   But credits are not yet consumed. This is deferred to 3)

2) The per destination limit is checked/updated.
   This might add a new node in inetpeer tree.

3) icmp_global_consume() consumes tokens if prior operations succeeded.

This means that host wide ratelimit is still effective
in keeping inetpeer tree small even under DDOS.

As a bonus, I removed icmp_global.lock as the fast path
can use a lock-free operation.

Fixes: c0303efeab ("net: reduce cycles spend on ICMP replies that gets rate limited")
Fixes: 4cdf507d54 ("icmp: add a global rate limitation")
Reported-by: Keyu Man <keyu.man@email.ucr.edu>
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reviewed-by: David Ahern <dsahern@kernel.org>
Cc: Jesper Dangaard Brouer <hawk@kernel.org>
Cc: stable@vger.kernel.org
Link: https://patch.msgid.link/20240829144641.3880376-2-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2024-10-17 15:21:27 +02:00
..
9p
net/9p: add 'pooled_rbuffers' flag to struct p9_trans_module
2022-10-05 07:05:41 +09:00
bluetooth
Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
2024-10-17 15:20:42 +02:00
caif
…
iucv
net/af_iucv: Use struct_group() to zero struct iucv_sock region
2021-11-19 11:52:25 +00:00
netfilter
netfilter: nft_set_pipapo: walk over current view on netlink dump
2024-09-30 16:23:54 +02:00
netns
xfrm: fix a data-race in xfrm_gen_index()
2023-10-25 12:03:06 +02:00
nfc
NFC: add NCI_UNREG flag to eliminate the race
2021-11-17 20:17:05 -08:00
phonet
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
sctp
sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop
2023-03-11 13:55:26 +01:00
tc_act
net/sched: transition act_pedit to rcu and percpu stats
2023-03-11 13:55:28 +01:00
6lowpan.h
…
act_api.h
net: sched: act: move global static variable net_id to tc_action_ops
2022-09-09 08:24:41 +01:00
addrconf.h
ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
2024-04-17 11:18:24 +02:00
af_ieee802154.h
…
af_rxrpc.h
rxrpc: Remove rxrpc_get_reply_time() which is no longer used
2022-09-01 11:44:13 +01:00
af_unix.h
af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
2024-05-02 16:29:27 +02:00
af_vsock.h
vsock: add API call for data ready
2022-08-23 10:43:11 +02:00
ah.h
…
amt.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
arp.h
neighbour: switch to standard rcu, instead of rcu_bh
2023-10-10 22:00:42 +02:00
atmclip.h
…
ax25.h
ax25: Use kernel universal linked list to implement ax25_dev_list
2024-06-12 11:03:20 +02:00
ax88796.h
ax88796: Fix some typo in a comment
2022-08-09 22:14:02 -07:00
bareudp.h
bareudp: Move definition of struct bareudp_conf to bareudp.c
2021-12-13 12:34:09 +00:00
bond_3ad.h
net: bonding: Share lacpdu_mcast_addr definition
2022-09-16 14:34:01 +01:00
bond_alb.h
bonding (gcc13): synchronize bond_{a,t}lb_xmit() types
2023-05-11 23:03:41 +09:00
bond_options.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
bonding.h
bonding: fix macvlan over alb bond support
2023-08-30 16:11:04 +02:00
bpf_sk_storage.h
…
busy_poll.h
net: busy-poll: use ktime_get_ns() instead of local_clock()
2024-09-04 13:25:02 +02:00
calipso.h
…
cfg80211-wext.h
…
cfg80211.h
wifi: mac80211: add a workaround for receiving non-standard mesh A-MSDU
2024-08-29 17:30:21 +02:00
cfg802154.h
mac802154: fix llsec key resources release in mac802154_llsec_key_del
2024-04-03 15:19:31 +02:00
checksum.h
powerpc/net: Implement powerpc specific csum_shift() to remove branch
2022-03-11 10:57:22 +00:00
cipso_ipv4.h
…
cls_cgroup.h
…
codel_impl.h
codel: remove unnecessary sock.h include
2021-12-22 15:03:47 -08:00
codel_qdisc.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
codel.h
codel: remove unnecessary pkt_sched.h include
2021-12-22 15:03:51 -08:00
compat.h
net: copy from user before calling __get_compat_msghdr
2022-07-24 18:39:17 -06:00
datalink.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
dcbevent.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
dcbnl.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
devlink.h
net: devlink: add port_init/fini() helpers to allow pre-register/post-unregister functions
2022-09-30 18:17:16 -07:00
dropreason.h
net: skb: export skb drop reaons to user by TRACE_DEFINE_ENUM
2022-09-07 15:28:08 +01:00
dsa.h
net: dsa: introduce preferred_default_local_cpu_port and use on MT7530
2024-04-27 17:07:17 +02:00
dsfield.h
…
dst_cache.h
wireguard: device: reset peer src endpoint when netns exits
2021-11-29 19:50:45 -08:00
dst_metadata.h
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next
2022-10-03 07:52:13 +01:00
dst_ops.h
net: fix __dst_negative_advice() race
2024-06-16 13:41:40 +02:00
dst.h
net: add atomic_long_t to net_device_stats fields
2022-12-31 13:33:02 +01:00
erspan.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
esp.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
espintcp.h
…
ethoc.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
failover.h
net: failover: add net device refcount tracker
2021-12-06 16:06:02 -08:00
fib_notifier.h
…
fib_rules.h
fib: expand fib_rule_policy
2021-12-16 07:18:35 -08:00
firewire.h
firewire: net: Make use of get_unaligned_be48(), put_unaligned_be48()
2022-07-28 22:21:54 -07:00
flow_dissector.h
flow_dissector: Add L2TPv3 dissectors
2022-09-20 09:13:38 +02:00
flow_offload.h
flow_offload: Introduce flow_match_l2tpv3
2022-09-20 09:13:38 +02:00
flow.h
inet: shrink struct flowi_common
2023-11-20 11:52:15 +01:00
fou.h
…
fq_impl.h
net/fq_impl: Use the bitmap API to allocate bitmaps
2022-07-11 19:49:38 -07:00
fq.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
garp.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
gen_stats.h
net: sched: Remove Qdisc::running sequence counter
2021-10-18 12:54:41 +01:00
genetlink.h
drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group
2023-12-13 18:39:12 +01:00
geneve.h
…
gre.h
…
gro_cells.h
…
gro.h
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2022-08-25 16:07:42 -07:00
gtp.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
gue.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
hwbm.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
icmp.h
…
ieee80211_radiotap.h
ieee80211: radiotap: fix -Wcast-qual warnings
2022-02-04 16:25:21 +01:00
ieee802154_netdev.h
net: ieee802154: return -EINVAL for unknown addr type
2022-10-07 08:42:00 +01:00
if_inet6.h
net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX
2023-12-20 17:00:15 +01:00
ife.h
…
ila.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
inet6_connection_sock.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
inet6_hashtables.h
net: remove duplicate reuseport_lookup functions
2024-06-12 11:03:12 +02:00
inet_common.h
inet: factor out locked section of inet_accept() in a new helper
2024-06-12 11:03:53 +02:00
inet_connection_sock.h
Fix race for duplicate reqsk on identical SYN
2024-07-05 09:31:46 +02:00
inet_dscp.h
ipv6: Define dscp_t and stop taking ECN bits into account in fib6-rules
2022-02-07 20:12:45 -08:00
inet_ecn.h
net: add skb_get_dsfield() helper
2021-10-15 11:33:08 +01:00
inet_frag.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
inet_hashtables.h
net: remove duplicate reuseport_lookup functions
2024-06-12 11:03:12 +02:00
inet_sock.h
udp: fix busy polling
2024-01-31 16:17:04 -08:00
inet_timewait_sock.h
tcp/dccp: do not care about families in inet_twsk_purge()
2024-08-29 17:30:44 +02:00
inetpeer.h
…
ioam6.h
treewide: Replace zero-length arrays with flexible-array members
2022-02-17 07:00:39 -06:00
ip6_checksum.h
net: move gro definitions to include/net/gro.h
2021-11-16 13:16:54 +00:00
ip6_fib.h
ipv6: Remove in6addr_any alternatives.
2023-09-19 12:28:10 +02:00
ip6_route.h
ipv6: fix source address selection with route leak
2024-08-14 13:53:02 +02:00
ip6_tunnel.h
ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode
2022-04-25 11:40:45 +01:00
ip_fib.h
ipv4: Fix incorrect TOS in route get reply
2024-08-03 08:49:24 +02:00
ip_tunnels.h
geneve: Fix incorrect inner network header offset when innerprotoinherit is set
2024-06-21 14:35:51 +02:00
ip_vs.h
ipvs: Update width of source for ip_vs_sync_conn_options
2023-05-24 17:32:39 +01:00
ip.h
icmp: change the order of rate limits
2024-10-17 15:21:27 +02:00
ipcomp.h
xfrm: ipcomp: add extack to ipcomp{4,6}_init_state
2022-09-29 07:18:00 +02:00
ipconfig.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
ipv6_frag.h
net: don't include ndisc.h from ipv6.h
2022-02-04 14:15:11 -08:00
ipv6_stubs.h
bpf: Derive source IP addr via bpf_*_fib_lookup()
2024-03-06 14:45:20 +00:00
ipv6.h
tcp: Fix bind() regression for v4-mapped-v6 wildcard address.
2023-09-19 12:28:10 +02:00
iw_handler.h
…
kcm.h
kcm: Serialise kcm_sendmsg() for the same socket.
2024-08-29 17:30:44 +02:00
l3mdev.h
…
lag.h
…
lapb.h
…
lib80211.h
…
llc_c_ac.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
llc_c_ev.h
…
llc_c_st.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
llc_conn.h
llc: add net device refcount tracker
2021-12-07 20:44:59 -08:00
llc_if.h
llc/snap: constify dev_addr passing
2021-10-13 09:40:46 -07:00
llc_pdu.h
llc: Drop support for ETH_P_TR_802_2.
2024-01-31 16:17:04 -08:00
llc_s_ac.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
llc_s_ev.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
llc_s_st.h
add missing includes and forward declarations to networking includes under linux/
2022-07-28 11:29:36 +02:00
llc_sap.h
…
llc.h
llc: fix out-of-bound array index in llc_sk_dev_hash()
2021-11-07 19:25:29 +00:00
lwtunnel.h
lwt: Check LWTUNNEL_XMIT_CONTINUE strictly
2023-09-13 09:42:33 +02:00
mac80211.h
wifi: mac80211: don't use rate mask for offchannel TX either
2024-10-17 15:20:38 +02:00
mac802154.h
net: mac802154: Create an error helper for asynchronous offloading errors
2022-04-25 20:51:12 +02:00
macsec.h
macsec: Enable devices to advertise whether they update sk_buff md_dst during offloads
2024-05-02 16:29:32 +02:00
mctp.h
net: mctp: take ownership of skb in mctp_local_output
2024-03-06 14:45:06 +00:00
mctpdevice.h
mctp: Pass flow data & flow release events to drivers
2021-10-29 13:23:51 +01:00
mip6.h
…
mld.h
…
mpls_iptunnel.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
mpls.h
…
mptcp.h
mptcp: remove MPTCP 'ifdef' in TCP SYN cookies
2023-01-07 11:11:44 +01:00
mrp.h
mrp: introduce active flags to prevent UAF when applicant uninit
2022-12-31 13:33:02 +01:00
ncsi.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
ndisc.h
neighbour: switch to standard rcu, instead of rcu_bh
2023-10-10 22:00:42 +02:00
neighbour.h
neighbour: fix data-races around n->output
2023-10-10 22:00:42 +02:00
net_debug.h
net: add CONFIG_DEBUG_NET
2022-05-11 12:43:10 +01:00
net_failover.h
…
net_namespace.h
netfilter: nf_flow_table: count pending offload workqueue tasks
2022-07-11 16:25:14 +02:00
net_ratelimit.h
…
net_trackers.h
net: add networking namespace refcount tracker
2021-12-10 06:38:26 -08:00
netevent.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
netlabel.h
…
netlink.h
netlink: split up copies in the ack construction
2023-10-10 22:00:44 +02:00
netprio_cgroup.h
…
netrom.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
nexthop.h
ipv6: remove nexthop_fib6_nh_bh()
2023-10-10 22:00:46 +02:00
nl802154.h
net: ieee802154: Fix compilation error when CONFIG_IEEE802154_NL802154_EXPERIMENTAL is disabled
2022-09-02 19:59:08 -07:00
nsh.h
…
p8022.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
page_pool.h
page_pool: fix inconsistency for page_pool_ring_[un]lock()
2023-06-05 09:26:20 +02:00
pie.h
…
ping.h
net/ipv4: ping_group_range: allow GID from 2147483648 to 4294967294
2023-06-14 11:15:16 +02:00
pkt_cls.h
net: sched: cls_api: introduce tc_cls_bind_class() helper
2022-10-02 16:07:17 +01:00
pkt_sched.h
net/sched: make psched_mtu() RTNL-less safe
2023-07-23 13:49:27 +02:00
pptp.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
protocol.h
tcp/udp: Make early_demux back namespacified.
2022-07-15 18:50:35 -07:00
psample.h
psample: Add a fwd declaration for skbuff
2021-08-09 15:34:21 -07:00
psnap.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
raw.h
raw: Fix NULL deref in raw_get_next().
2023-04-13 16:55:23 +02:00
rawv6.h
raw: convert raw sockets to RCU
2022-06-19 10:00:02 +01:00
red.h
treewide: use get_random_u32() when possible
2022-10-11 17:42:58 -06:00
regulatory.h
wifi: cfg80211: fix regulatory disconnect with OCB/NAN
2023-07-19 16:21:10 +02:00
request_sock.h
tcp: Use BPF timeout setting for SYN ACK RTO
2022-02-02 14:45:18 +00:00
rose.h
net: rose: add netdev ref tracker to 'struct rose_sock'
2022-08-01 11:59:23 -07:00
route.h
net: annotate data-races around sk->sk_mark
2023-08-11 12:08:14 +02:00
rpl.h
ipv6: rpl: Fix Route of Death.
2023-06-14 11:15:20 +02:00
rsi_91x.h
…
rtnetlink.h
net: validate veth and vxcan peer ifindexes
2023-08-30 16:11:02 +02:00
rtnh.h
…
sch_generic.h
net/sched: fix false lockdep warning on qdisc root lock
2024-06-27 13:46:15 +02:00
scm.h
scm: fix MSG_CTRUNC setting condition for SO_PASSSEC
2023-05-11 23:03:18 +09:00
secure_seq.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
seg6_hmac.h
…
seg6_local.h
…
seg6.h
udp6: Use Segment Routing Header for dest address if present
2022-01-04 12:17:35 +00:00
selftests.h
…
slhc_vj.h
…
smc.h
net/smc: Pass on DMBE bit mask in IRQ handler
2022-07-27 13:24:42 +01:00
snmp.h
…
sock_reuseport.h
soreuseport: Fix socket selection for SO_INCOMING_CPU.
2022-12-31 13:32:04 +01:00
sock.h
net: fix __dst_negative_advice() race
2024-06-16 13:41:40 +02:00
Space.h
wan: remove sbni/granch driver
2021-08-03 13:05:26 +01:00
stp.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
strparser.h
tls: rx: remove the message decrypted tracking
2022-07-18 11:24:10 +01:00
switchdev.h
net: bridge: switchdev: Skip MDB replays of deferred events on offload
2024-03-01 13:26:35 +01:00
tcp_states.h
…
tcp.h
tcp: check skb is non-NULL in tcp_rto_delta_us()
2024-10-17 15:21:13 +02:00
timewait_sock.h
…
tipc.h
…
tls_toe.h
…
tls.h
tls: fix race between async notify and socket close
2024-02-23 09:12:31 +01:00
transp_v6.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
tso.h
…
tun_proto.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
udp_tunnel.h
udp: lockless UDP_ENCAP_L2TPINUDP / UDP_GRO
2024-01-10 17:10:28 +01:00
udp.h
ipv4, ipv6: Use splice_eof() to flush
2024-01-10 17:10:27 +01:00
udplite.h
tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct().
2022-10-12 17:50:37 -07:00
vsock_addr.h
…
vxlan.h
vxlan: Fix nexthop hash size
2023-08-11 12:08:17 +02:00
wext.h
…
x25.h
…
x25device.h
…
xdp_priv.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
xdp_sock_drv.h
xsk: Remove unused xsk_buff_discard
2022-09-30 07:55:46 -07:00
xdp_sock.h
net: Don't include filter.h from net/sock.h
2021-12-29 08:48:14 -08:00
xdp.h
xdp: Adjust xdp_frame layout to avoid using bitfields
2022-09-26 13:28:19 -07:00
xfrm.h
xfrm: Preserve vlan tags for transport mode software GRO
2024-05-17 11:56:10 +02:00
xsk_buff_pool.h
xsk: Fix unaligned descriptor validation
2023-05-11 23:03:21 +09:00